yoti

We need to verify user’s ID, KYC, Age and Documents but don’t want to be storing that information. This ticks all those boxes, and provides a higher level of admin user verification and security than 2FA/MFA alone. Especially important for audit-able ecommerce admin users that have access to private customer data and potential access to the movements of value in goods, payments, refunds, shipments, credits, coupons and vouchers. Quick to setup and definitely recommended for ecommerce.

Yoti is a great security/ID validation mobile phone app. This plugin allows users to login to your WordPress site using their Yoti account by employing 2-FA (2 factor authentication). Usually 2-FA is cumbersome and takes time, but this is quicker than anything else. You choose what information (name, email, avatar photo, tel, etc.) to read from Yoti and your users can login without having to remember one more username/password combo. For the ultimate security solution, you could disable the WP login screen and use Yoti to login as admin, editor, etc. This way you beat brute-force attacks, keyloggers on public or compromised PCs, easy passwords (like 123456) and your users can login just with their mobile phones without having to remember complicated passwords. Just make sure that with a quick and easy way (e.g. renaming a file through FTP, or updating a value in MySQL) you can re-enable the login screen just in case the Yoti plug-in “breaks”. And all that security is free.

Had to badger my host to upgrade PHP to v7 to get this to work – which is no bad thing. Plugin works fine but is a bit of a work in progress so far. Some styling options (eg for the login widget) would be good and the integration documentation is a bit scant – perhaps because the devs think it’s really easy to integrate. It does the authentication job really well though and seems robust. Could be doing with some additional functionality perhaps but this looks quite promising and I’ll keep an eye on it