Expand 2FA options: Yubikey, WebAuthn (FIDO, FIDO2, U2F), also HOTP counter-code for existing Google Authenticator
Add two-factor-auth for YubiKey.
Thank you for your input. We will explore the possibility of implementing YubiKey in upcoming releases.
-
Concerned commented
This is why plesk is secondary to WHM... it's been SIX years for this feature that should've been included in the next update. Seriously, it's not hard, and its the year 2020. U2F authentication is STANDARD, countless services use it. There's no excuse at this point other than laziness or incompetence.
-
Alexandre Féron commented
System time is one thing on the OS. It should remain free to be set to whatever Timezone the System Administrator need it.
Having Plesk requesting to change System Time or my device Timezone is absolutely not acceptable.
- Imagine all software ask the same ?
- And what if I travel and my device change Timezone ?Plesk should avoid imposing to set System Time to have Google Authenticator Working.
Plesk team must improve its implementation of Google Authenticator.
-
Sopherl commented
WebAuthn is the future standard! Need it really urgent
-
Sopherl commented
Waiting to use my Fido2 Keys with WebAuthn two-factor-authentication
-
Michael Lux commented
Please merge this with the Yubikey thread: https://plesk.uservoice.com/forums/184549-feature-suggestions/suggestions/6903468-yubikey
-
Michael Lux commented
Please implement WebAuthn support and merge with respective thread https://plesk.uservoice.com/forums/184549-feature-suggestions/suggestions/38640655-webauthn-two-factor-authentication-at-the-webinter
For starters, see https://www.murawski.ch/2018/06/plesk-mit-yubikey-otp-absichern/
-
Anonymous commented
2020 calling. Still no Yubikey?
-
Cornelius Berger commented
@Plesk Staff: Wrong approach "if it will be popular". This is the way how brilliant innovations always keep hidden in the lower desk drawer.
You have to think like genius minds seeing the future like Gene Roddenberry or Arthur C. Clarke.
Implement FIDO2 and *make* it poular! -
H50K commented
Yes, I want to use YubiKey 5 (2 pcs. one for backup)
-
H50K commented
U2F and the ability to add multiple tokens (Backup-Token)
-
TRILOS new media commented
The admin user name can´t be changed and there´s no captcha or other brute force prevention method for the Plesk login page (AFAIK), which makes this feature request more important.
-
Adrian commented
I also agree, please merge this feature suggestion with the WebAuthn one.
-
Paul commented
Agreed.... Webauthn would now be the best way forward at this point in time.
-
Michael Gabriel commented
it would make no sense to limit this to yubikey, if thats even possible.
webauthn is an open standard. https://webauthn.io/
we are using solo keys for example https://solokeys.com/ -
Anonymous commented
Plesk is #1 web control panel and YubiKey is #1 authentication key. They need to put them together.
Yubico is offering tones of scripts, libraries for easy implementation of YubiKey into any software. Just visit https://developers.yubico.com/
-
Michael Gabriel commented
general u2f/webauthn would be much more appreciated.
merge with https://plesk.uservoice.com/forums/184549-feature-suggestions/suggestions/38640655-webauthn-two-factor-authentication-at-the-webinter ? -
Adrian commented
I created a new feature suggestion for the implementation of WebAuthn which is compatible with Yubikeys: https://plesk.uservoice.com/forums/184549-feature-suggestions/suggestions/38640655-webauthn-two-factor-authentication-at-the-webinter
-
Adrian commented
Implementing the new standard WebAuthn would be the best solution for 2FA.
-
anonymous commented
Google Authenticator Extension for Plesk, can be setup with the time-based codes on the client side however it does not allow to be setup with the counter-based codes or (HOTP).
Please, add the possibility to use both options whenever the extension is setup on the client side.
-
Mounes Kayyali commented
To Enable YubiKey (2FA) and our company (Sol distributor in Asia, Africa & CIS) will create YubiKey with laser engraved Plesk Logo