3 ms·
This would be a great feature in a lot of web-based apps. Generate a few hundred passwords when you are on a secure connection, use them when needed. Edit: I f
by bobds 16y ago
This would be a great feature in a lot of web-based apps. Generate a few hundred passwords when you are on a secure connection, use them when needed.
Edit: I found a few implementations.
http://wordpress.org/extend/plugins/one-time-password/ http://wordpress.org/extend/plugins/one-time-password/
http://alexking.org/blog/2008/06/27/phonefactor-10 http://alexking.org/blog/2008/06/27/phonefactor-10
http://henrik.schack.dk/yubikey-plugin/ http://henrik.schack.dk/yubikey-plugin/
http://blog.fastmail.fm/2008/07/21/one-time-and-sms-passwords/ http://blog.fastmail.fm/2008/07/21/one-time-and-sms-password...
http://squirrelmail.org/plugin_view.php?id=276 http://squirrelmail.org/plugin_view.php?id=276
Yubikey looks interesting and they also have a web service API.
http://www.yubico.com/products/yubikey/ http://www.yubico.com/products/yubikey/
http://www.yubico.com/developers/api/ http://www.yubico.com/developers/api/
MyPW is another web service: https://www.mypw.com/ https://www.mypw.com/
OpenOTP supports both hardware tokens (also supports Yubikeys) and all kinds of phones.
http://www.rcdevs.com/products/openotp/ http://www.rcdevs.com/products/openotp/
- gnosis 16y agoBefore you trust Yubikey, you might want to read about its weaknesses: http://security.dj/?p=4 http://security.dj/?p=4