Rublon Two-Factor Authentication (2FA)

FAQ

Why Do I Need Two-Factor Authentication?

Botnets carry out brute force attacks against thousands of WordPress sites and blogs every day, regardless of size. Once inside, botnets infect your visitors with malware. A compromised website leads to delisting by search engines or blocking by your hosting provider. Rublon Account Security prevents such attacks.

Why are Passwords Not Enough?

Many people use a simple, easy-to-guess password. It can be easily stolen when they use multiple devices; the same password across multiple services; or on unsecured connections, such as public Wi-Fi networks. Botnets hammer at your WordPress site trying to compromise it using millions of common passwords and character combinations.

How Does Rublon Work?

During the first login, confirm your identity by clicking on the link you’ll receive via email. Your next login from the same device will only require your WordPress password. For additional security, you can install the Rublon mobile app, which allows to use few others authentication methods, e.g. scans a Rublon Code to confirm your identity.

Why Should I Use Rublon?

Rublon is simple and easy. Activate the plugin and you’re done. Your users don’t need to install or configure anything and don’t need training or one-time codes. Once they confirm their identity on a device, they can log in to all web services by only entering their WordPress password.

How is Rublon Different?

Traditional two-factor authentication solutions demand users enter a one-time password each time they want to login. That’s why people don’t like them. Rublon is different. With Rublon, you confirm your identity by simply clicking on a link or using one of selected of authentication methods via Rublon mobile app.

What Does Rublon Cost?

Rublon for WordPress gives you access to the free Rublon Personal Edition, which lets you protect up to 1 account. For more accounts, sign up to Admin Console and select a Paid Plan.

How can I protect my account with Rublon?

Simply install the Rublon for WordPress plugin and activate it. After activation, your administrator account will be instantly protected with email-based two-factor authentication. In order to protect more accounts, please switch Rublon to paid subscription by contacting hello@rublon.com.

I want more than email-based, two-factor authentication. Does Rublon support phone-based, out-of-band two-factor authentication?

Yes! Just install the Rublon mobile app onto your phone (available for Android and iOS). After entering your WordPress login credentials, you will be prompted to verify your account in one of the following ways:
* enter the TOTP code (Time-Based One Time Password)
* scan a QR code
* confirm transaction by using push notification
* copy the verification code from SMS sent to your mobile number

Do all my users have to be protected by Rublon?

Plugin activation instantly protects your administrator account. Users who install the Rublon mobile app will have additional protection regardless of the setting you’ve selected. Please keep in mind that you need have paid subscription in order to protect more than 1 account per website.

Will my login credentials be known to Rublon?

No. Rublon never knows your credentials or those of your users. They are never transmitted to our servers. Rublon does its work in the background only after WordPress verifies your password. It’s an independent security layer that sits beneath the login form.

Why is using the Rublon mobile app more secure than email-based authentication?

The Rublon mobile app holds your digital identity with your private encryption key, which never leaves your phone. With any action requiring the mobile app, such as confirming your identity, the Rublon app generates an unique encrypted digital signature. Gaining access to an email account without two-factor authentication is easier than stealing your private key from your phone and reusing it.