2fa | The Blog Pros

August 12, 2019

Super Safe & Secure Single Sign On Surprise!

As more and more of you manage more and more sites via The Hub we’ve got some super big things in the works, starting with single sign on (SSO) goodness.

Take a look through the documentation now or read on for a more narrative version, to ask any questions and all that jazz.

Essentially, if you choose to opt-in, you can now go straight from WPMU DEV to your WordPress admin area, without needing to enter your username or password, saving you vast amounts of time and annoyance.

And we don’t even store your username or password details, so your site is secure and safe.

How Do I Get Started?

Well first up you’ll need to make sure your WPMU DEV Dashboard plugin is up to date (although of course it should already be because you’ve either got it set to auto update or you have Automate set up to take care of that… if you haven’t already then please do!).

Then, in your WP Admin area visit “WPMU DEV > Settings” and turn it on :)

Turning on Single Sign on in WPMU DEV — It doesn’t get much easier than that

Now, whenever you log into The Hub you’ll be able to jump to the WP Admin area of your site without having to log in.

Is It Safe & Secure?

Absolutely, because we’re using the WPMU DEV Dashboard plugin which securely communicates with WPMU DEV we don’t need to know or save any of your credentials (we do the same with credit cards).

So, while there are absolutely no plans to go there… were we to suffer a security incident then all of your passwords (and payment methods) would be completely safe.

And to be even more secure, you should turn on 2 Factor Authentication (using Google Authenticator) for your WPMU DEV account too, just visit your account page and scroll down a little.

Make your WPMU DEV account even more secure

And of course you should also be using Defender to protect each of your sights with 2FA too, adding in yet another layer of security.

How About Adding New Sites?

As you know we’ve been working super hard to give you the easiest possible ‘getting started’ experience when you add a new site to WPMU DEV and now, this is an option as part of that :)

All you need to do is tick the box.

What’s Next?

We know it’s taken much longer than a lot of you would have hoped for, but we’re determined to get the next stage of The Hub (2.0) right and this is all part of making that happen – so you should expect to see a whole bunch of features that make managing multiple WP sites vastly easier, quicker and more enjoyable.

Please take a look at the roadmap to find out more and, of course, feel to ask us anything in the comments.

June 28, 2019

Top 4 Website Security Tips for Development and Hosting

Too many small and medium-sized businesses (SMBs) have a pervasive, persistent delusion: “We’re too small — hackers wouldn’t be interested in us.” But it’s never really been true.

And now, it is demonstrably, statistically not true. The latest Verizon Data Breach Investigations Report (DBIR) found that 43 percent of breaches involved SMB victims. That’s two to four times the percentage of victims in the public sector (16 percent), healthcare (15 percent), and financial (10 percent).

April 11, 2019

Why I Took the Time to Turn On Two-Factor Authentication

For the past few years, my dad has been encouraging me to turn on two-factor authentication (2FA) on any service that offers it. Having grown up in the social media age, I felt his requests were unwarranted.

I know social media inside and out (and I have a master’s degree to prove it). I have always taken care not to share personal information online that I wouldn’t share in person, and I regularly update my security settings across all my accounts on the internet. So, what was the big deal with turning on two-factor authentication?

January 21, 2019

Two Interesting Session-Related Vulnerabilities

Sessions are an essential part of most modern web applications. This is why session-related vulnerabilities often have a sizable impact on the overall security of a web application. They frequently allow the impersonation of other users and can have other dangerous side effects.

What Are Session Variables?

For those not familiar with session variables, they are server-side variables whose value is tied to the current session. This means that if a user visits the website, you could store their username in the session variable as they log in and it will be available until the session expires or the user logs out. If another user logs in, that triggers a new session and the session variable will return a different username for that particular user.