Google authenticator login WordPress and Gmail account

During this time, I learned about AWS and found that Google authenticator can be configured to enhance login security. I wonder if I can use Google authenticator elsewhere? Unexpectedly, wordpess and Gmail account are also supported.

WordPress configuration is simple. First install plugin and activate

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/38/1C/wKiom1OzXk6jFyYTAABpwezAxmw835.png "style =" float: none; "Title =" 1.png" alt = "wkiom1ozxk6jfyytaabpwezaxmw835.png"/>

Then, generate the QR code under the Administrator's profile.

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/38/1B/wKioL1OzXh_zyvMmAABkUiqNUpM070.png "style =" float: none; "Title =" 2.png" alt = "wkiol1ozxh_zyvmmaabkuiqnupm070.png"/>

Install the corresponding software on the iPhone (marked as ** white in the lower left corner) and scan the QR code to bind the software.

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/38/1C/wKiom1OzXlnwcArmAA9DhLNyu1U752.png "Title =" img_2240.png "style =" float: none; "alt =" wkiom1ozxlnwcarmaa9dhlnyu1u752.png "/>

Save the WordPress settings and enter the logon page again. You can find that you have multiple Verification Code options.

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/38/1C/wKiom1OzXk6DT5j9AAAwAHTNU3E403.png "style =" float: none; "Title =" 3.png" alt = "wkiom1ozxk6dt5j9aaawahtnu3e403.png"/>

Below I have two different accounts, one is AWS and the other is my WordPress. The verification code changes every 30 seconds.

When logging on to WordPress, enter the user, password, and Google authenticator 6-digit verification code.

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/38/1C/wKiom1OzYPCQXyU-AAHd0ocoRGM580.png "Title =" img_2245.png "alt =" wKiom1OzYPCQXyU-AAHd0ocoRGM580.png "/>

Let's take a look at the implementation principle of Google authenticator.

As shown in the preceding steps, the server generates a random password. You can manually enter or scan the QR code to save the password to the mobile phone device; then google authenticator calculates a six-digit number every 30 seconds through a hash algorithm using the timestamp and the Stored Password. After the input, the server calculates the number using the same algorithm. If the number is the same, the verification passes. 30 seconds can ensure that the user has enough time to enter the password and avoid brute force cracking by hackers (after all, there is only a 10 power 6 probability that the password will be cracked soon ), however, hackers can still use man-in-the-middle attacks to obtain user names, passwords, and verification codes.

In a similar way, we can also bind a Gmail account

Log on to Gmail and select 2-step verification in security.

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/38/2C/wKiom1OzfWKAEWYSAAB5JB7DDBk340.png "style =" float: none; "Title =" 4.png" alt = "wkiom1ozfwkaewysaab5jb7ddbk340.png"/>

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/38/2C/wKiom1OzfWPiin84AADm7vVNegw161.png "style =" float: none; "Title =" 5.png" alt = "wkiom1ozfwpiin84aadm7vvnegw161.png"/>

Enter the mobile phone number, and the Google server will send a number to the mobile phone

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/38/2C/wKioL1OzfTSTtMFFAABThKN1cBw307.png "style =" float: none; "Title =" 6.png" alt = "wkiol1ozftsttmffaabthkn1cbw307.png"/>

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/38/2C/wKioL1OzfTSgM6KHAAAzlHJzWv8436.png "style =" float: none; "Title =" 7.png" alt = "wkiol1ozftsgm6khaaazlhjzwv8436.png"/>

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/38/2B/wKioL1OzfKTz8GOvAAA6voAiBrc167.png "style =" float: none; "Title =" 8.png" alt = "wkiol1ozfktz8govaaa6voaibrc167.png"/>

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/38/2C/wKiom1OzfNTiX4doAAAn5UW3PPM873.png "style =" float: none; "Title =" 9.png" alt = "wkiom1ozfntix4doaaan5uw3ppm873.png"/>

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/38/2C/wKiom1OzfNfxwcmZAAA6PTlPY7s749.png "style =" float: none; "Title =" 10.png" alt = "wkiom1ozfnfxwcmzaaa6ptlpy7s749.png"/>

All the way down, even if the phone is successfully bound. However, beans want to use Google authenticator for verification. The mobile phone is only used as an auxiliary method for verification. Click switch to app.

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/38/2B/wKioL1OzfKyQEI16AABV6wO3RQA793.png "style =" float: none; "Title =" 11.png" alt = "wkiol1ozfkyqei16aabv6wo3rqa793.png"/>

Select mobile phone type

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/38/2B/wKioL1OzfK-w9iZLAAAyaT_TxZs338.png "style =" float: none; "Title =" 12.png" alt = "wKioL1OzfK-w9iZLAAAyaT_TxZs338.png"/>

Scan the QR code in the same way as WordPress.

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/38/2C/wKiom1OzfOGzdRNnAABWG8HY5H4882.png "style =" float: none; "Title =" 13.png" alt = "wkiom1ozfogzdrnnaabwg8hy5h4882.png"/>

In this way, the binding is successful.

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/38/2C/wKiom1OzfOfjyeMSAAB4m8dNqv4387.png "style =" float: none; "Title =" 15.png" alt = "wkiom1ozfofjyemsaab4m8dnqv4387.png"/>

Log in to see, the first step is the same as normal login, enter the user name and password

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/38/2B/wKioL1OzfLnCXFc1AAAheNKegZQ794.png "style =" float: none; "Title =" 16.png" alt = "wkiol1ozflncxfc1aaahenkegzq794.png"/>

Step 2 adds a verification code

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/38/2C/wKiom1OzfOiTptaRAAAkQcUZqYc667.png "style =" float: none; "Title =" 17.png" alt = "wkiom1ozfoitptaraaakqcuzqyc667.png"/>

Test successful!

References

Http://blog.seetee.me/archives/73.html

Http://en.wikipedia.org/wiki/Google_Authenticator

Https://support.google.com/accounts/answer/1066447? Hl = en

This article from the "Mapo tofu" blog, please be sure to keep this source http://beanxyz.blog.51cto.com/5570417/1433346