Fluistr Authentication

Fluistr is based on a secure 1 on 1 tunnel connection between the WordPress website and the Fluistr app on your mobile phone. Thus no servers, software, third parties or other unknown devices can interfere. The free version has full support for one fluistr connection including the use of the free Android or iOS app. If you need more connections, a pro version is available. Forget passwords When you start using Fluistr, passwords are a thing of the past. And that's a good thing. Passwords are generally easy to crack and are also reused to log in to various websites. As an administrator you can't afford this, your password is the gateway to all your customers precious work. But you should also not allow other users of your website to just leave the keys on the table. It's time to forget all passwords! Features

• Easy login process - Simply enter your login name or email address and confirm via the app
• Magic Link - Simply log in with a Magic Link when you forgot your phone
• Two way factor authentication without third party servers - The mobile app interacts directly with your website. You can read all about Fluistr and the terms of service on Fluistr.com. Fluistr for WordPress is a Free amigos product.

Links

• Website
• Documentation
• Support
• Download iOS app
• Download Android app
• Terms of service

From your WordPress dashboard

1. Visit Plugins > Add New
2. Search for "Fluistr Authentication"
3. Activate Fluistr Authentication from your Plugins page
4. Read the documentation to get started
5. Download Android or iOS app the documentation to get started

2.0.1

• Reconnect the app from the login screen (e.g. after reinstalling the app): a new connection link is sent by e-mail. The current connection keeps working until the new one is set up. Can be turned off in the settings.
• The login screen uses the WordPress admin theme color.
• Dutch translation updated.

2.0.0

• New protocol (requires Fluistr app 2.0 or newer). Existing connections must be connected again.
• Login requests are bound to the browser that started them; the app shows a number that must match the login screen.
• App requests are signed (HMAC-SHA256) with replay protection; connection secrets are stored encrypted.
• Password login and password reset are blocked for Fluistr users (application passwords keep working).
• New connected device must be confirmed in the browser. Connect or remove a device from your profile page.
• Magic Link is now an option (off by default, as it bypasses the app) and uses its own one-time links.
• The app always shows two decoy numbers per pending login request.
• Rate limiting on login requests, e-mails and the app API.
• Removed: anonymous disconnect, the Wordfence and Solid Security add-ons (standard wp_login hooks are used now).
• Security: TLS verification for the license server, escaping and capability checks in the admin.

1.2.4

• Bugfixes
• Added extra checks and improvements for caching plugins
• Added switch on profile page

1.2.0

• Bugfixes and some visual improvements

1.0.1

• Various improvements and bugfixes

1.0.0 Release Date - 1 March 2021 It all starts here.