I my attempt to write my travel stories in internet cafés without worries I wrote the Login Virtual Keyboard plugin sometime ago. However, using a virtual keyboard to prevent keylogging is somewhat clumsy and is still not entirely safe.

To improve safety I recently wrote the One-Time Password plugin that enables me to login to my weblog using passwords which are valid for one session only, so my main WordPress password cannot be stolen. The plugin is simple to use, just install it, generate a password list and you can start logging-in using one-time passwords.

For even more safety, I added the possibility to protect administrative actions with one-time passwords in version 2.

If you find this plugin useful, please vote for it on the WordPress Competition Blog.

Update: this plugin is one of the 11 12 13 Vital Tips and Hacks to Protect Your WordPress Admin Area.

Login

Login

List

List

Generator

Generator

The authorize window for an administrative action

Authorize

VN:F [1.8.4_1055]
Rating: 0 (from 0 votes)

22 Responses to “WordPress plugin: One-Time Password”

  1. [...] WordPress Plugin: One-Time Password [...]

  2. Abu Rashid says:

    hi, i wanted to use this password protection for a specific page, not in all page, is it possible by this plug-ins?

    • Marcel says:

      The One-Time Password plugin is meant to protect your weblog. I don’t see why it could be useful to protect a specific page. Maybe you can elaborate on what you are trying to accomplish.

      • Abu Rashid says:

        in our web site, we wanted to have a page which is password protected and only invited user can see the page. so I wanted to use one time password to view that page.

  3. Mished says:

    Hello

    I feel really funny about this ….

    I installed your plugin, sent to settings and did everything and then pressed Generate.

    But … where is the list of passwords supposed to go? Where am I supposed to pick it up, because there’s no list on the same page (ie settings page where I supposedly generated them).

    Am I supposed to go to another page to pick up the list? (scratching head)

    Thanks in advance.

    • Marcel says:

      The One-Time Password list should appear at the top of the same page, but the page is positioned in such a way that the Print button below the list is visible. Maybe your password was too short, look for error messages near the generate button. If you still have trouble sent me a screen shot and I will try to help you further.

  4. [...] Lücke schließt unter anderem das Modul “One-Time-Passwort” von Mar­cel Bokhorst (http://blog.bokhorst.biz/2200/computers-en-internet/wordpress-plugin-one-time-password/). Die Instal­la­tion ist denkbar ein­fach. Die deutsche Überset­zung habe ich dem Pro­jekt [...]

  5. Heiko says:

    Hello there,

    i always got 404 Error on Logon Screen. I use WP 2.8.2 DE Edtion from
    here: http://wordpress-deutschland.org/download/

    i have no idea why.
    If you need german localization please contact me.

    regards
    Heiko

    • Marcel says:

      I guess the just released version 1.2 will fix your problem as well, please let me know.
      A German translation would be very welcome! A Dutch .po file is included in the distribution.

  6. eco says:

    Hi, nice plugin. I have a problem cuz the plug don’t show in the login page the correct message but it show “Error 404″. Specification: wordpressmu 2.8.1

    • Marcel says:

      The plugin wasn’t tested with WordPress MU yet. Today (even before your comment) I installed WordPress MU (for the first time) and a little fix made the plugin work :) . I just released version 1.2 of the plugin with this fix. Any feedback, positive or negative, would be appreciated.

  7. Jackd says:

    Hi,

    Sorry, but your plugin doesn’t work. When I actived it I got this message :

    Parse error: syntax error, unexpected ‘{‘ in /homez.42/juriblog/www/wp-content/plugins/one-time-password/otp.php on line 48

    My wordpress release is the 2.8.2 one.(php 4)

    If you can do smth for me…

    • Marcel says:

      Thanks for reporting this problem.

      It appears that the used PHP One-Time Passwords class is not compatible with PHP 4. I updated the plugin to check for the PHP version and added a warning to the description of the plugin (version 1.1).

      I am sorry that I cannot solve this problem for you :(

      • Jackd says:

        Hi again,

        Now your plugin (release 1.2) is OK for me. I rewrited my .htaccess file to use PHP 5.0.10 instead of 4.4.9 – Thanks for your work.
        Now I’m going to learn how to use it.

  8. [...] Usage instructions can be found under Other Notes and the support page can be found here. [...]

  9. ovidiu says:

    the plugi nsounds great, gonna give it a try right now. but I am not 100% how it works. will I have to rememebr all those 1time passwords on the lsit and just use one whenever I need one?

Leave a Reply

(required)

(required)

Bear