Integration with vBulletin - [DBTech] Two-Factor Authentication (vB4)

Two-Factor Authentication lets you ensure only trusted networks have access to your account, by using your smartphone to validate login attempts from new IP addresses.


Why use Two-Factor Authentication?

The most common form of "hacking" a forum today is someone guessing or in some other way gaining access to the password to an administrator account. Even with password protection on your AdminCP and ModCP directory, irreparable harm can be done with an administrator account without needing to log in to any of these locations. Enabling two-factor authentication ensures that only trusted networks can access the accounts of your staff as well as your members.

Our two-factor authentication mod uses Google Authenticator to pair a member's forum account with their smartphone app. A "Recovery Key" shown on-screen during setup ensures that if a member should ever lose their phone, they can regain access to their account.


-------------------------------------------------------------------------------------------

Other addons available @ www.DragonByte-Tech.com/forum
Support posted at our forum is generally answered much quicker.

-------------------------------------------------------------------------------------------

If you like this mod please hit the button to the right ---->

Please remember to click the, button to the right if you installed the mod ---->

What does 'Marking As Installed' do ?

* It helps you to stay on top of updates - members who have installed modifications will be notified by us whenever new updates are available.

* For security issues - vbulletin.org will contact all members who have installed a modification whenever a security issue is brought to their attention.

* Marking a modification as installed also helps us know how many people are using our work, giving us extra incentive to provide more features and new modifications.

We appreciate the support!

-------------------------------------------------------------------------------------------

Feature List

UserCP Integration

• Adds a "Two-Factor Authentication" link in the UserCP under "My Account"
• Displays a page with a button to activate or deactivate the authenticator

Network Verification

• Logs the IP Address of members who have activated the authenticator
• Asks for verification code for untrusted networks
• Blocks forum, AdminCP and ModCP access attempts from untrusted networks

Google Authenticator

• Uses Google's authenticator to handle the QR barcode and code generation
• Works on Android and iOS
• Recovery Key ensures that if you lose your phone, you can deactivate the authenticator

IP Whitelist

• Adds a new config.php parameter, $config['TwoFactor']['ipwhitelist']
• Whitelists IPs for all accounts for as long as the IP is in config.php
• Follows the same rules as the AdminCP "IP Ban" interface for powerful IP management

General / Other

• Display version number
• Enter your Affiliate ID

-------------------------------------------------------------------------------------------

This mod displays a copyright notification in the footer of all pages which includes:

• 1 Link to DragonByte Technologies homepage
• 1 Link to Product Description page of this modification

[DragonByte Tech]

We'll be looking at future authentication providers in the future


Fillip

[DragonByte Tech]

Two-Factor Authentication v1.0.2

New Features Added:

IP Whitelist

• Adds a new config.php parameter, $config['TwoFactor']['ipwhitelist']
• Whitelists IPs for all accounts for as long as the IP is in config.php
• Follows the same rules as the AdminCP "IP Ban" interface for powerful IP management

Fillip

[imported_silkroad]

Will this (potentially) install and work for vB 3.8.X forums?

[DragonByte Tech]

Unfortunately not, as the templates are made with vB4 syntax, as are the calls to the template. Sorry


Fillip

[iraqiboy90]

Originally Posted by DragonByte Tech

Two-Factor Authentication v1.0.2

New Features Added:

IP Whitelist

• Adds a new config.php parameter, $config['TwoFactor']['ipwhitelist']
• Whitelists IPs for all accounts for as long as the IP is in config.php
• Follows the same rules as the AdminCP "IP Ban" interface for powerful IP management

Fillip

Does this work with partial IP?

[DragonByte Tech]

Yes it does, it works with partial IPs and wildcards just like the AdminCP IP Ban interface.

Fillip

[Cadellin]

Just installed this and I must say it's a great idea however I think it needs a few minor additions to make it work more universally.

- vBulletin mobile style support - currently users cannot use their mobile effectively as they get a error "this page is not supported via the mobile style".
- Option not to remember IP after current session expires

What's the current sitation with Tapatalk does anyone know? Does this mod conflict or is there an in-built workaround to avoid clashes?

[mikez006]

There is a bug when you have password expiration enabled.

Your password is x days old, and has therefore expired.
Please change your password using this page.

When the user clicks to change their password the page simply reloads and doesn't allow the user to reset their password. I disabled two-factor authentication and the password change link then worked.

Anyone know how to fix this?

[DragonByte Tech]

Two-Factor Authentication v1.0.2 Patch Level 1

Bug Fixes:

• This mod will no longer interfere with the "Password Expiry" feature
• This mod will no longer interfere with the "Force Profile Fields" feature

Fillip

[DragonByte Tech]

Two-Factor Authentication v1.0.2 Patch Level 2

Bug Fixes:

• This mod will no longer interfere with the "Password Expiry" feature
• This mod will no longer interfere with the "Force Profile Fields" feature

Fillip