@carlos_a_escobar Yes. We are planning to make our API available for other projects too, but first we’d like to focus on WordPress users, then other platforms and finally to make it available through our API.
Report
I think this sounds great. I hope it takes off.
Sadly my experiences of having to pull out my device, open an app and perform an action, whenever I want to log into something prove frustrating after a very short while.
We're humans and we're lazy like that 👍
@angus_halen You are right!
While it is true that most users won’t have more than three different passwords at the same time, it is also true that there are many who will change their password just slightly depending on the Service. For example someone might use ‘password1’ for their email and ‘Password1!’ for their banking account, ‘passw0rd’ for yet something else. This usage model leads to frustration when trying to figure out whether the needed password was ‘Password1’ or maybe ‘password1’ or ‘passw0rd1’. I believe you get the idea. Because of that very reason what we tried to accomplish was a good spot between two extremes: security and convenience. We strive to have Magic Password not only convenient but also secure :)
Thank you very much for your comment.
Hi Product Hunters,
We’d like to introduce you our passwordless authentication product for WordPress - Magic Password.
It is a free security plugin, which allows you to log in to your WordPress website without providing username and password. Just open our mobile application (iOS or Android), scan QR code on your screen, and it’s done. It’s simple, quick, and highly secure – like magic!
It also protects your WordPress account from:
- Bruteforce attacks
- Phishing & keylogger attacks
- Website takeover
There is no registration required.
Just download the plugin with our companion mobile app, pair your device, and you are ready to go!
If you are a WordPress user, please let us know what do you think and how it works for you.
Thanks in advance
@marobardi Very nice indeed. I use a security plugin and until then had no idea the number of bot-driven hacking attempts that happen every day from the same IP ranges.
Report
That's sounds good. Actually, the problem with those passwords is still exist. I was thinking that the authorization process for all web, mobile apps, software will be changed from old style "login" + "password" to something new. Let's see maybe this is it :)
@alecor0290 Agreed, we have to change the "login" + "password" to something better. We all know that the "old way" is too insecure and has too many flaws. That's why we observe trending two factor authentication (2FA), which combines what you know (password) with what you have (phone). The problem is that while 2FA secures the process by adding another layer of authentication, it’s very inconvenient.
But what if we could dump the passwords altogether and use only the second factor: the phone? With this in mind we created a service that's secure and convenient at the same time. We strongly believe that it’s a glimpse of what’s future is holding for us :)
Report
The shared secret, symmetric encryption, password (whatever you want to call it) is the bane of the internet (made worse by tiny mobile keyboards). Really wish everyone would work towards implementing asymmetric cryptography (public/private keys) for authentication.
Report
@jared_mess I was developing something similar related with password-free authentication. It used asymmetric cryptography (public/private keys) for authentication, however I dropped the project.
Report
Sounds like the SQRL project that Steve Gibson made (https://www.grc.com/sqrl/sqrl.htm). I believe that this is going to be the future of authentication. Passwords are terrible.
Report
I wished 1Password did that. We scan a qr code with an authenticated device (and that device only) and get logged in anywhere.
2FAS - 2FA Authentication App
2FAS - 2FA Authentication App
2FAS - 2FA Authentication App
2FAS - 2FA Authentication App
TaskClone
Magic Password