Adding Two-Step Verification to Typecho
Machine-translated (anthropic, claude-haiku-5-5) from the Chinese original. Read the original in 中文
Contents
Foreword
Today I discovered a very handy app, Google's Authenticator. It is a two-step verification client based on time and hash algorithms, and it complies with the RFC 6238 and RFC 4226 standards. Since the security of a blog is still very important, after all it concerns the server, two-step verification is quite necessary here. Conveniently, Typecho has a Google Authenticator plugin, open-sourced on GitHub. Those who question its security can review it themselves: project address
Usage
Rename the file to GAuthenticator, place it in the /usr/plugins directory, and then enable it in the admin panel.
The plugin is disabled by default. When you enable it for the first time, you need to scan the QR code to bind it, then enter the code displayed on your phone. It can only be enabled after the verification succeeds.
Download link here: click me
Installing the Client
Compatible with any AuthOTP software that conforms to the RFC6238 specification:
- Microsoft Authenticator
- Google Authenticator
- 1Password
- Authy
- KeePass
- LastPass
- ...
Here, I personally use Google's Authenticator. It takes up relatively little system resources and is simple and convenient.
Comments