=== Rublon === Contributors: Rublon Tags: two-factor authentication, login, password, two-factor, authentication, security, login verification, two-step verification, 2-step verification, two-step authentication, 2-step authentication, 2-factor authentication, 2-factor, 2FA, wordpress security, mobile, mobile phone, cell phone, smartphone, login protection, qr code, admin, javascript, plugin, multi-factor authentication, MFA, login approval, two-factor verification, Zwei-Faktor-Authentifizierung, dwuskładnikowe uwierzytelnianie, dwuskładnikowe logowanie, logowanie, uwierzytelnianie Requires at least: 3.3.x Tested up to: 3.9.1 Stable tag: 1.2.8 License: GNU Public License, version 2 License URI: http://opensource.org/licenses/gpl-license.php Rublon protects you against intruders who found out your passwords: two-factor authentication without a phone == Description == [Rublon](https://rublon.com) is the Internet Security Layer that protects you against intruders who found out your passwords. Its two-factor authentication keeps you safe against account takeover, data theft and bruteforce attacks. = Two-factor authentication without a phone = Unlike other solutions, Rublon doesn't interrupt your workflow. Just define your trusted devices and use them to access all your protected accounts, without using your phone. = Mobile app for total control = No phone is needed to access your accounts on trusted devices, but you need it to protect your accounts and to access them from new devices. The Rublon mobile app makes this possible. It also gives you an overview of your trusted devices and lets you manage them remotely. It's available for [Android](https://play.google.com/store/apps/details?id=com.rublon.android), [iOS](https://itunes.apple.com/us/app/rublon/id501336019), [BlackBerry](appworld.blackberry.com/webstore/content/20177166/?countrycode=US&lang=en) and [Windows Phone](http://www.windowsphone.com/en-us/store/app/rublon/809d960f-a3e8-412d-bc63-6cf7f2167d42). = Quick and easy setup = Download the Rublon mobile app to your phone, install the plugin on your website and protect your account by scanning a QR code. Your users will be able to protect their accounts on their own, if they wish to do so. Watch the tutorial: [youtube http://www.youtube.com/watch?v=DWV_jt5XbAc] = Security through cryptography = Rublon [leverages](https://rublon.com/what/security) your phone's processing power and distributed asymmetric cryptography. Introducing crytography into your daily workflow has never been easier. = What if I lose my phone? = Simply deactivate your phone on the ["Lost phone"](https://rublon.com/help/deactivate) page on our website. Once deactivated, recover your account by installing the Rublon mobile app on a new phone. = Supported languages = Rublon is being used all over the world. This plugin has been translated to: - Croatian (by [Borisa Djuraskovic](http://www.webhostinghub.com)) - English - German - Polish - Serbian (by [Borisa Djuraskovic](http://www.webhostinghub.com)) - Spanish (by [Andrew Kurtis](http://www.webhostinghub.com)) == Installation == 1. Install the Rublon mobile app onto your phone and register (available for [Android](https://play.google.com/store/apps/details?id=com.rublon.android), [iOS](https://itunes.apple.com/us/app/rublon/id501336019), [BlackBerry](appworld.blackberry.com/webstore/content/20177166/?countrycode=US&lang=en) and [Windows Phone](http://www.windowsphone.com/en-us/store/app/rublon/809d960f-a3e8-412d-bc63-6cf7f2167d42)). 2. Log in to your WordPress administration panel using an administrator account. 3. Go to "Plugins" -> "Add New", type "Rublon" in the search box and press the "Search Plugins" button. 4. Click the "Install Now" link next to the Rublon plugin in the search results and confirm the installation. 5. Click on "Activate Plugin". 7. Click the "Protect your account" button and scan the QR code that will appear, using the Rublon mobile app on your smartphone. Now all your users will also be able to protect their accounts, if they wish to do so. = Server requirements = - PHP version 5.2.17 or greater - cURL PHP extension enabled == Frequently Asked Questions == = How can I protect my account with Rublon? = Log in to your WordPress account, go to your profile and click on the "Protect your account" button. = Will all my users have to use Rublon? = No. Your users decide on their own if they want to be protected by Rublon. We highly recommend everybody, especially administrators, to protect their account though. = Will my login credentials be known to Rublon? = Rublon never knows your login credentials. They are never transmitted to its servers. Rublon does its work only after WordPress positively verifies your password. It's an independent security layer that sits beneath the login form. = How secure is my data on Rublon's servers? = Your Rublon mobile app holds your digital identity with your private encryption key, which never leaves your phone. Whenever you perform any action that requires the mobile app, like adding a new trusted device, it generates a unique encrypted digital signature that confirms your identity. Since your digital identity stays on your phone, you are safe even in the unlikely event that Rublon's servers get hacked. = What if I lose my phone? = Simply deactivate your phone on the ["Lost phone"](https://rublon.com/help/deactivate) page on our website. Once deactivated, recover your account by installing the Rublon mobile app on a new phone. = How much does Rublon cost? = Rublon for WordPress is free and always will be. = How does Rublon make money? = Web systems with a lot of users [pay us](https://developers.rublon.com/98/Pricing) for advanced features and premium support. == Screenshots == 1. Plugins page with "Protect your account" button, which is becomes available to all users after an administrator protects his account 2. Rublon page viewed by an administrator before protecting his account 3. Protecting your account requires you to confirm your identity by scanning a Rublon QR code with your smartphone, using the Rublon mobile app 4. A protected account features a Rublon icon visible at the top right corner of every page inside the administration panel, placed next to the current user's avatar 5. Rublon page viewed by a user after an administrator has protected his account 6. Login page with Rublon Protection Badge 7. On a protected account, Rublon verifies if the user who provided correct login credentials is logging in from a Trusted Device == Upgrade notice == After a successful installation, the plugin can be updated automatically in the "Plugins" section of the Administation Panel. == Changelog == = 1.2.8 = * Additional information about missing PHP libraries = 1.2.7 = * Croatian and Serbian language support added, thanks to Borisa Djuraskovic from www.webhostinghub.com = 1.2.6 = * Spanish language support added, thanks to Andrew Kurtis from www.webhostinghub.com = 1.2.5 = * Added compatibility for admin dashboards working over SSL (thanks to Robert Abela from www.wpwhitesecurity.com for reporting it) * Internal Rublon libraries updated = 1.2.4 = * Visual components updated for compatibility with WordPress 3.8 * Internal Rublon libraries updated = 1.2.3 = * XML-RPC API disabled by default with the option to enable it back on the plugin's settings page * Rublon internal libraries updated = 1.2.2 = * Rublon can now also serve as an additional factor for any other authentication method, e.g. social login through Facebook * Core Rublon libraries updated = 1.2.1 = * German language support added * Improved compatibility with a few unusual server configuration types * Added compatibility with some maintenance mode plugins * Added compatibility with the Better WP Security plugin = 1.2.0 = * Simplified setup process - protect your account right away after activating the plugin * An administrator needs to protect his account with Rublon before any other user will be able to do it * Rublon Seal shows up on sign-in page * Rublon now has an own section inside the main menu of the administration panel * If your account is protected, the Rublon icon shows up at the top right corner of any page in the administration panel * Users unfamiliar with Rublon are now being informed that they need the Rublon mobile app * Visual improvements = 1.1.9 = * Rublon settings page moved from the "Settings" to "Plugins" section of the administration area * Rublon icon added to the Rublon settings page * Outdated versions of the plugin will not be able to activate the Rublon service anymore = 1.1.8 = * Warning message about improper PHP version on PHP versions between 5.2.17 and 5.3.2 no longer displayed * Code updated to WordPress coding standards, thanks to Alex King from http://alexking.org = 1.1.7 = * Fixed error when setting CAcert path in cURL in PHP 5.2.17 * Confirmed compatibility with PHP version 5.2.17 = 1.1.6 = * Improved error handling * Minor text and translation changes = 1.1.5 = * Improved error handling = 1.1.4 = * User accounts protected by Rublon are marked with a Rublon icon on the user list in the Administration Panel * The process of securing a user's account with Rublon has been technically improved * Advanced error handling during plugin activation = 1.1.3 = * Minor text and translation changes = 1.1.2 = * Administrator's account is automatically protected by Rublon upon plugin activation * Administrators can now disable other users' two-factor authentication = 1.1.1 = * Minor text and translation updates = 1.1.0 = * Error handling and data verification in the admin settings = 1.0.2 = * Rublon library update = 1.0.1 = * Updated texts and translations = 1.0 = * Rublon for WordPress: Automatic Two-Factor Authentication