Two-Factor Authentication Plugin on GitHub...Trustworthy?

markb14391

• June 14, 2014 19:54

Hi, We are disappointed that cPanel still doesn't have two-factor authentication. There is now a beta project on GitHub that implements it. /https://github.com/steadramon/cpanel_addon-twostepauth However, I'm always hesitant to trust third-party products from public sources. I'm wondering if anyone else has found this and has had time to analyze the code and see if it's legit? I took a brief look but haven't had time to do more yet. Thanks, Mark

• 

  panacheweb

  • June 16, 2014 06:57

  Greetings, I saw the same system, and have not found an answer to this either.. I would love to see two factor in cpanel/whm/ssh and the ability to bypass 2 factor from certain ip's such as my server host would not need to use two factor. Cheers, MJ

  0
• 

  cPanelMichael

  • June 16, 2014 16:31

  Hello :) I've not reviewed or attempted to use that third-party plugin, but I wanted to make note of the official URL to this feature request: [url=http://features.cpanel.net/responses/two-factor-authentication-is-a-must]Two-factor Authentication | cPanel Feature Requests Please ensure you vote and add your input to the official feature request. Thank you.

  0
• 

  markb14391

  • June 19, 2014 14:50

  I do hope that cPanel implements 2FA. However, the facts we are faced with today are that it isn't implemented and it is a highly sought-after feature that we want to provide to our cllents. I am surprised that it's not in cPanel yet, especially with security being so important now. So for now, we have to look at what's available today, not what might be implemented in cPanel down the road. So it would be great if someone can vet this...maybe lots of us can start offering 2FA now, then possibly replace it when (if) cPanel adds it. I've also looked at RV2Factor, but it seems complicated for end users to set up. And, unless i'm mistaken, it looks like it costs $3 per month per cPanel user...which is simply cost-prohibitive for most hosting providers. I guess they think we'll offer it to our clients as an optional add-on they can buy, but I'd much rather have a user-friendly system in place that allows our users to implement 2FA easily. Thus the interest in the solution on GitHub. Thanks!

  0
• 

  markb14391

  • June 27, 2014 17:09

  Too bad, this might be a good (and free!) 2FA implementation for cPanel.

  0
• 

  ThinIce

  • June 27, 2014 18:23

  There is a thread over on web hosting talk by the author of the plugin

  0
• 

  markb14391

  • June 28, 2014 15:49

  Ah, good thinking! :-)

  0
• 

  dto123

  • June 29, 2014 00:22

  Having 2FA would be great on cpanel. I have it set up on as many accounts as I can, the funny thing I find though is that most my customers have no idea what it is and don't use it for any accounts.

  0
• 

  saurabhnsonar

  • August 06, 2014 12:23

  We too waiting for cPanel to add those feature legally. For now anyone using this third party plugin? Is it secure?

  0
• 

  allpar

  • June 10, 2015 14:51

  Not to rouse a dead thread, but ... is it secure? It"s actively maintained, that"s obvious, but has anyone looked at the code? It only applies to the CPanel accounts and not WHM itself, so I'm not inclined anyway, I want increased security for WHM whether it"s via a dongle, code generator, or TFA...

  0

Please sign in to leave a comment.