Skip to content

jariz/2stepauth

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

23 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

##What is it?
2StepAuth (2 step authorization) is a MyBB plugin created as a extra security layer on top of the normal login procedure.
It uses the Google Authenticator app for the creation of authorization codes.
Alternatively, emails can also be used for users without a smartphone.

##Why would I need this?
First of all, this makes access from any IP address than your own impossible.
This means, that any person that doesn't have your phone / your email, can never log in into your account, despite having your password.
Second of all, this is a excellent protection against database 'hacks' - 'hacks' meaning when the database gets breached/compromised.
The specifics of these 2 statements get explained later down this document.

##How does smartphone authorization work? Please read the main article on the wiki for this here

##How does email authorization work?
It's pretty similar to phone authorization, except with email.
To futher expand on that: when the user tries to log in with a non-authorized IP, an email gets send, and the site will request for the authorization code in the email.
Alternatively, the user can also click on the url in the email (but he will need to re-enter his credentials).
If you want more information on this, you can read this article (which covers mainly the phone authorization, but the process is very similar to email auth)


That's a brief explanation of the entire process, if you want more, check out the code!

About

MyBB plugin that provides 2 step authentication trough Google Authenticator.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages