Swekey Plugin

The swekey is a low cost but highly secure USB authentication token.

This module allows any swekey owner to protect his account against phishing and other piracy techniques.

The first time a user will plug its swekey in its computer while he his logged an alert will popup asking him to attach the plugged swekey to his account.

If the user confirms, the swekey is attached to the account.

Once a swekey is attached to an account the following features will be available:

* When your swekey is plugged the login dialog will automatically fill the 'username' input box.
* You won't be able to login without the swekey plugged.
* If you unplug your swekey while you are logged, you are automatically logged out.
* You can detach the swekey from your account in your profile.

without having the swekey plugged to his computer.

Both user and administrator accounts can be protected using swekey hardware authentication.

According to the swekey privacy policy, absolutely no user information is ever send to the swekey authentication servers.

Swekeys can be purchased at http://www.swekey.com?promo=joomla .

Report

bybrian on December 1, 2008
The concept of swekey is fantastic. It uses the same (or similar) key technology as banks use for unique authentication.

Even if my username and password are somehow discovered, perhpas written down on a post it note no one can access my site as they dont have the physical key, a small usb dongle.

The software plugin is free and the usb dongle at $15 is nothing when you consider the security it provides.

And you can use the same key on multiple joomla sites, any openid site, phpmyadmin, drupal etc. (a full list is at the publishers site)

The plugin is easy to install and during the beta stage they have been extremely quick and responding to queries and taking on board suggestions.
bybadr71 on November 21, 2008
What I like:
- easy to install (plugin and the usb)
- work great, no swekey, no loging

what I dislike:
- being connected to my website via another website (swekey.com) so my private information like the password is there, even if it's crypted