wordpress滑动验证

wordpress滑动验证

wordpress滑动验证

Have you noticed how popular sites like Facebook and Google are now giving you the ability to add two-factor authentication to improve security? Well now you can add two-factor authentication to your WordPress site. This ensures maximum security for your WordPress site. In this article, we will show you how to add two-factor authentication for WordPress using both Google Authenticator as well as SMS text message.

您是否注意到像Facebook和Google这样的热门网站现在为您提供了添加两因素身份验证以提高安全性的功能？ 好了，现在您可以在您的WordPress网站中添加两因素身份验证。 这样可以确保您的WordPress网站的最大安全性。 在本文中，我们将向您展示如何使用Google Authenticator和SMS文本消息为WordPress添加双重身份验证。

为什么要为WordPress登录添加两因素身份验证？ (Why Add Two-Factor Authentication for WordPress Login?)

One of the most common tricks hackers use is called brute force attacks. By using automated scripts, hackers try to guess username and password to break into a WordPress site.

黑客使用的最常见的技巧之一就是蛮力攻击 。 通过使用自动脚本，黑客试图猜测用户名和密码，以闯入WordPress网站。

If they steal your password or accurately guess it, then they can infect your website with malware.

如果他们窃取了您的密码或准确猜出了密码，则他们可能会感染恶意软件。

One of the easiest ways to protect your WordPress website against stolen password is to add two-factor authentication. This way even if someone stole your password, they will need to enter a security code from your phone to gain access.

保护您的WordPress网站免遭密码盗窃的最简单方法之一就是添加双重身份验证。 这样，即使有人窃取了您的密码，他们也需要从您的手机中输入安全密码才能获得访问权限。

There are two ways to setup two-factor authentication in WordPress:

有两种方法可以在WordPress中设置两因素身份验证：

1. SMS Verification – where you receive the verification code via text message.
   SMS验证–您可以通过短信收到验证码。
2. Google Authenticator App – Fallback option where you receive the verification code in an app.
   Google Authenticator App –后备选项，您可以在其中接收应用程序中的验证码。

Let’s take a look at how to easily add two-factor verification to your WordPress login screen for free.

让我们看一下如何轻松地将两因素验证免费添加到WordPress登录屏幕。

1.将两步SMS验证添加到WordPress登录屏幕 (1. Adding 2-Step SMS Verification to WordPress Login Screen)

This method adds a 2-Step SMS verification to your WordPress login screen. After entering the WordPress username and password, you will receive a text message via SMS on your phone with a code.

此方法将两步SMS验证添加到WordPress登录屏幕。 输入WordPress用户名和密码后，您将通过手机上的SMS通过短信收到一条带有代码的短信。

First you will need to install the Two Factor and Two Factor SMS plugins. For more details, see our step by step guide on how to install a WordPress plugin.

首先，您需要安装“ 两因素”和“ 两因素” SMS插件。 有关更多详细信息，请参阅有关如何安装WordPress插件的分步指南。

The first plugin which is called Two Factor provides multiple ways to set up 2-step verification in WordPress. The second plugin, which is called Two Factor SMS is an addon for the first plugin. It adds support for 2-Step SMS verification. You will need both these plugins installed and activated.

第一个称为“两个因素”的插件提供了多种方法来在WordPress中设置两步验证。 第二个插件，称为Two Factor SMS，是第一个插件的插件。 它增加了对两步SMS验证的支持。 您将需要安装和激活这两个插件。

Upon activation, you need to head over to Users » Your Profile page and scroll down to Two Factor Options section.

激活后，您需要转到“ 用户»您的个人资料”页面，然后向下滚动到“两个因素选项”部分。

Check the box next to ‘SMS (Twilio)’ option and also click the radio button to make it your primary verification method.

选中“ SMS(Twilio)”选项旁边的框，然后单击单选按钮使其成为您的主要验证方法。

After that scroll down to the Twilio section.

之后，向下滚动到Twilio部分。

You will be asked to provide your Twilio account information.

系统将要求您提供Twilio帐户信息。

Twilio is an online service that offers phone, voice messaging, and SMS services to use with your own applications. They also have a limited free plan which would be sufficient for our purpose here.

Twilio是一项在线服务，可提供电话，语音消息和SMS服务以与您自己的应用程序一起使用。 他们还有一个有限的免费计划，足以满足我们在此的目的。

Head over to Twilio website and create your free account.

前往Twilio网站并创建您的免费帐户。

On the signup page, you will be asked for the usual personal information. After that you will be asked which products you would like to use first.

在注册页面上，将要求您提供常规的个人信息。 之后，系统将询问您首先要使用哪些产品。

You need to select SMS and then select 2-factor authentication for ‘What you are building’ option. Finally select PHP for your programming language.

您需要选择SMS，然后为“您要构建的内容”选项选择2因子身份验证。 最后，选择PHP作为您的编程语言。

Once you have signed up for an account, you will reach your Twilio dashboard where you need to click on the get started button.

注册帐户后，您将到达Twilio仪表板，需要在这里单击入门按钮。

This will take you to a settings wizard where you need to click on the ‘Get your first Twilio number’ button.

这将带您进入设置向导，在该向导中，您需要单击“获取您的第一个Twilio号码”按钮。

It will bring up a popup showing a US based phone number. Copy and save this number in a text file and then click on the ‘Choose this number’ button.

它将弹出一个显示美国电话号码的弹出窗口。 复制此号码并将其保存在文本文件中，然后单击“选择此号码”按钮。

You can now exit the wizard and head over to Settings » Geo Permissions page.

现在，您可以退出向导并转到设置»地理权限页面。

Here you need to select the countries where you will be sending SMS. Since you are using the service to receive SMS for yourself, you can select the country you live in and countries you travel to.

在这里，您需要选择发送短信的国家。 由于您正在使用该服务自己接收短信，因此可以选择居住的国家和旅行的国家。

Next, you need to visit the Twilio console dashboard to copy your Account SID and Auth Token.

接下来，您需要访问Twilio控制台仪表板以复制您的帐户SID和身份验证令牌。

Now you have all the information that you need.

现在，您拥有了所需的所有信息。

Go to the user profile page on your WordPress site and enter your Twilio Account SID, Auth token, and sender phone number.

转到WordPress网站上的用户个人资料页面，然后输入您的Twilio帐户SID，身份验证令牌和发件人电话号码。

Add your own phone number as the ‘Receiver Phone Number’.

添加您自己的电话号码作为“接收方电话号码”。

Don’t forget to click on the ‘Update Profile’ button to save your settings.

不要忘记单击“更新配置文件”按钮以保存您的设置。

You can now logout from your WordPress site to see the plugin in action.

现在，您可以从WordPress网站注销以查看正在使用的插件。

On login screen, first you will provide your WordPress username and password. After that, you will receive a SMS notification on your phone, and you will be asked to enter the code you received.

在登录屏幕上，首先，您将提供WordPress用户名和密码。 之后，您会在手机上收到短信通知，并要求您输入收到的验证码。

After entering the SMS code, you will be able to access your WordPress admin area.

输入短信代码后，您将可以访问WordPress管理区域。

Note: This method works great, but what if you are traveling and unable to receive text messages on your phone number?

注意：这种方法效果很好，但是如果您在旅途中无法在电话号码上接收短信怎么办？

Let’s solve this problem by adding a fallback option too.

让我们通过添加后备选项来解决此问题。

2.使用Google Authenticator将2要素验证添加到WordPress (2. Adding 2-Factor Verification to WordPress with Google Authenticator)

As a fallback option, we will setup 2-Factor verification using Google Authenticator.

作为后备选项，我们将使用Google Authenticator设置2要素验证。

SMS verification will still be your primary verification method. In case you don’t get the SMS, you’ll still be able to login using the Google Authenticator app on your phone.

SMS验证仍将是您的主要验证方法。 万一您没有收到短信，您仍然可以使用手机上的Google Authenticator应用程序登录。

Head over to Users » Your Profile page and scroll down to two factor options section.

转到“ 用户»您的个人资料”页面，然后向下滚动至两个因素选项部分。

Click the Enabled checkbox next to ‘Time Based One-Time Password (Google Authenticator)’ and then click on ‘view options’ link to begin Google Authenticator setup.

点击“基于时间的一次性密码(Google身份验证器)”旁边的已启用复选框，然后单击“查看选项”链接以开始设置Google Authenticator。

You will now see a QR code which you will need to scan with the Google Authenticator app.

现在，您将看到一个QR码，您需要使用Google Authenticator应用程序进行扫描。

Go ahead and install Google Authenticator app on your phone.

继续并在手机上安装Google Authenticator应用。

Once you have installed the app, open it and click on the add button.

安装该应用程序后，将其打开并单击添加按钮。

Now you need to scan the QR code shown on the plugin’s settings page using your phone’s camera.

现在，您需要使用手机的摄像头扫描显示在插件设置页面上的QR码。

The app will detect and add your website. It will also show you a six digit code. Enter the code in the plugin’s settings page, and you are done.

该应用程序将检测并添加您的网站。 它还将显示一个六位数的代码。 在插件的设置页面中输入代码，即可完成。

Don’t forget to click on the ‘Update Profile’ button to save your changes.

不要忘记单击“更新配置文件”按钮来保存更改。

You can now logout of your WordPress site to see it in action.

现在，您可以注销WordPress网站以查看其运行情况。

First you will have to enter your WordPress username and password. After which you will be asked to enter SMS verification code.

首先，您必须输入WordPress用户名和密码。 之后，将要求您输入SMS验证码。

If you didn’t get the SMS code, then you can click on ‘Use backup method’ link and enter the code generated by Google Authenticator app on your phone.

如果您未收到短信代码，则可以单击“使用备份方法”链接，然后在手机上输入由Google Authenticator应用生成的代码。

Troubleshooting

故障排除

If you lose access to your phone, then you may be unable to login. See our guide on what to do when you are locked out of WordPress admin area to recover access to the admin area.

如果您无法访问手机，则可能无法登录。 请参阅我们的指南，了解当您被锁定在WordPress管理区域之外以恢复对管理区域的访问权限时的处理方法。

We hope this article helped you add 2-factor SMS verification for WordPress login. You may also want to see our step by step WordPress security guide for beginners.

我们希望本文能帮助您为WordPress登录添加2要素SMS验证。 您可能还希望查看针对初学者的逐步WordPress安全指南 。

If you liked this article, then please subscribe to our YouTube Channel for WordPress video tutorials. You can also find us on Twitter and Facebook.

如果您喜欢这篇文章，请订阅我们的YouTube频道 WordPress视频教程。 您也可以在Twitter和Facebook上找到我们。

翻译自: /

wordpress滑动验证