Tweeted twitter.com/#!/StackSecurity/status/123700179365924864
5 removed unnecessary chat
source | link

I'd like to implement multi factor authentication on a few projects.

Now the first factor would be username and password, for the second factor I would like to use a token generator.

These tokens would be 6 characters long and generated by a device that the user carries (like a phone or special device)

But... I have no idea how a token generator works and how to implement it. (so I'm here to learn)

I would eventually like to build a phone app to do the token generation and a website (php) where the use would login.

Can anyone please give me some pointers in the right direction on how these algorithms work?

Edit: I've accepted jeffs answer, but if you have any extra tips, hints and/or security considerations, please tell!

Grtz, Thomas

I'd like to implement multi factor authentication on a few projects.

Now the first factor would be username and password, for the second factor I would like to use a token generator.

These tokens would be 6 characters long and generated by a device that the user carries (like a phone or special device)

But... I have no idea how a token generator works and how to implement it. (so I'm here to learn)

I would eventually like to build a phone app to do the token generation and a website (php) where the use would login.

Can anyone please give me some pointers in the right direction on how these algorithms work?

Edit: I've accepted jeffs answer, but if you have any extra tips, hints and/or security considerations, please tell!

Grtz, Thomas

I'd like to implement multi factor authentication on a few projects.

Now the first factor would be username and password, for the second factor I would like to use a token generator.

These tokens would be 6 characters long and generated by a device that the user carries (like a phone or special device)

But... I have no idea how a token generator works and how to implement it. (so I'm here to learn)

I would eventually like to build a phone app to do the token generation and a website (php) where the use would login.

Can anyone please give me some pointers in the right direction on how these algorithms work?

4 added 137 characters in body
source | link

I'd like to implement multi factor authentication on a few projects.

Now the first factor would be username and password, for the second factor I would like to use a token generator.

These tokens would be 6 characters long and generated by a device that the user carries (like a phone or special device)

But... I have no idea how a token generator works and how to implement it. (so I'm here to learn)

I would eventually like to build a phone app to do the token generation and a website (php) where the use would login.

Can anyone please give me some pointers in the right direction on how these algorithms work?

Edit: I've accepted jeffs answer, but if you have any extra tips, hints and/or security considerations, please tell!

Grtz, Thomas

I'd like to implement multi factor authentication on a few projects.

Now the first factor would be username and password, for the second factor I would like to use a token generator.

These tokens would be 6 characters long and generated by a device that the user carries (like a phone or special device)

But... I have no idea how a token generator works and how to implement it. (so I'm here to learn)

I would eventually like to build a phone app to do the token generation and a website (php) where the use would login.

Can anyone please give me some pointers in the right direction on how these algorithms work?

I'd like to implement multi factor authentication on a few projects.

Now the first factor would be username and password, for the second factor I would like to use a token generator.

These tokens would be 6 characters long and generated by a device that the user carries (like a phone or special device)

But... I have no idea how a token generator works and how to implement it. (so I'm here to learn)

I would eventually like to build a phone app to do the token generation and a website (php) where the use would login.

Can anyone please give me some pointers in the right direction on how these algorithms work?

Edit: I've accepted jeffs answer, but if you have any extra tips, hints and/or security considerations, please tell!

Grtz, Thomas

3 got corrected on te ammound of factors
source | link

I'd like to implement multi factor authentication on a few projects.

Now the first two factorsfactor would be username and password, for the thirdsecond factor I would like to use a token generator.

These tokens would be 6 characters long and generated by a device that the user carries (like a phone or special device)

But... I have no idea how a token generator works and how to implement it. (so I'm here to learn)

I would eventually like to build a phone app to do the token generation and a website (php) where the use would login.

Can anyone please give me some pointers in the right direction on how these algorithms work?

I'd like to implement multi factor authentication on a few projects.

Now the first two factors would be username and password, for the third factor I would like to use a token generator.

These tokens would be 6 characters long and generated by a device that the user carries (like a phone or special device)

But... I have no idea how a token generator works and how to implement it. (so I'm here to learn)

I would eventually like to build a phone app to do the token generation and a website (php) where the use would login.

Can anyone please give me some pointers in the right direction on how these algorithms work?

I'd like to implement multi factor authentication on a few projects.

Now the first factor would be username and password, for the second factor I would like to use a token generator.

These tokens would be 6 characters long and generated by a device that the user carries (like a phone or special device)

But... I have no idea how a token generator works and how to implement it. (so I'm here to learn)

I would eventually like to build a phone app to do the token generation and a website (php) where the use would login.

Can anyone please give me some pointers in the right direction on how these algorithms work?

2 spelling, removal of unnecessary salutations
source | link
1
source | link