Preguntas frecuentes

Installation Instructions

1. Make sure your webhost is capable of providing accurate time information for PHP/WordPress, ie. make sure a NTP daemon is running on the server.
2. Instalar y activar el plugin.
3. Enter a description on the Users -> Profile and Personal options page, in the Google Authenticator section.
4. Scan the generated QR code with your phone, or enter the secret manually, remember to pick the time based one.
   You may also want to write down the secret on a piece of paper and store it in a safe place.
5. Remember to hit the Update profile button at the bottom of the page before leaving the Personal options page.
6. Eso es todo, tu sitio WordPress es ahora un poco más seguro.

Can I use Google Authenticator for WordPress with the Android/iPhone apps for WordPress?

Yes, you can enable the App password feature to make that possible, but notice that the XMLRPC interface isn’t protected by two-factor authentication, only a long password.

I want to update the secret, should I just scan the new QR code after creating a new secret?

No, you’ll have to delete the existing account from the Google Authenticator app on your smartphone before you scan the new QR code, that is unless you change the description as well.

I am unable to log in using this plugin, what’s wrong ?

Los códigos de verificación de Google Authenticator están basados en el tiempo, por lo que es crucial que el reloj de tu teléfono sea preciso y esté sincronizado con el reloj del servidor donde está alojada la instalación de WordPress.
Si tienes un teléfono Android, puedes usar una aplicación como ClockSync para configurar tu reloj si tu proveedor de telefonía no proporciona información exacta del tiempo.
Otra opción es habilitar el “modo relajado” en los ajustes para el plugin, esto permitirá códigos más válidos permitiendo un máximo de 4 min. de desfase en ambas direcciones.

I have several users on my WordPress installation, is that a supported configuration ?

Yes, each user has his own Google Authenticator settings.

During installation I forgot the thing about making sure my webhost is capable of providing accurate time information, I’m now unable to login, please help.

Si tiene acceso SSH o FTP a tu cuenta de alojamiento web, puede eliminar manualmente el plugin de tu instalación de WordPress,
Simplemente elimina el directorio wp-content/plugins/google-authenticator y podrás volver a iniciar sesión con nombre de usuario/contraseña.

I don’t own a Smartphone, isn’t there another way to generate these secret codes ?

Sí, hay una versión basada en la web aquí: http://gauth.apps.gbraad.nl/
Proyecto de Github aquí: https://github.com/gbraad/html5-google-authenticator

Can I create backupcodes ?

No, but if you’re using an Android smartphone you can replace the Google Authenticator app with Authenticator Plus.
It’s a really nice app that can import your existing settings, sync between devices and backup/restore using your sd-card.
It’s not a free app, but it’s well worth the money.

Any known incompatabilities ?

Yes, the Man-in-the-middle attack/replay detection code isn’t compatible with the test/setup mode in the “Stop spammer registration plugin”,
please remember to remove the “Check credentials on all login attempts” checkmark before installing my plugin.