Blog & guides
Guides that end with it working
Configuration walkthroughs, evaluation guidance and deployment stories for the engineer doing the work, commands included.
12 July 2026
The real cost of passwords and SMS codes — and the case for a phone tap
Passwords are a help-desk tax and SMS codes are a metered bill that keeps rising. The business case for passwordless, in numbers a CFO can follow.
12 July 2026
MFA fatigue: how attackers walk past the second factor you already bought
Push-bombing, SIM swaps and adversary-in-the-middle beat SMS and one-tap MFA every week. Why it happens, and what phishing-resistant really means.
12 July 2026
NIS2 and authentication: what essential and important entities must change
NIS2 turns strong authentication into a legal duty with board-level liability. What the directive expects from your logins, and how to close the gap.
9 July 2026
Authentication profiles — when Approve should do more than log you in
Attach server-side callbacks to Approve and Deny: open a door from a QR code, activate a VPN network profile, page security on a denied request.
9 July 2026
Push notifications from any script — the appliance as an alert channel
Send informational push notifications to enrolled phones with one curl call: server alerts, on-call pings, price watchers, home automation.
8 July 2026
Add 2FA to a legacy web app — without touching its code
Put a SAML reverse proxy in front of any legacy web application and gate every login with a phone approval, with zero changes to the app itself.
7 July 2026
Linux SSH 2FA with pam_radius — phone approval for SSH and sudo
Phone-approval 2FA for Linux SSH, sudo and su with pam_radius and the Notakey auth-proxy, plus a safe local fallback so you never get locked out.
30 June 2026
MikroTik router login 2FA — phone approval for WinBox and SSH
Require a phone approval for WinBox, WebFig and SSH logins to a MikroTik router: the same auth-proxy RADIUS setup, pointed at service=login.
19 May 2026
WordPress and a simple second factor
Add phone-tap two-factor authentication to any WordPress site in six steps with the Notakey provider plugin.
4 March 2026
How to configure WCP for Windows Remote Desktop
Set up the Notakey Windows Credential Provider for two-factor remote desktop login, from appliance config to going passwordless.
20 January 2026
VPN 2FA with RADIUS — the complete auth-proxy setup
Put the Notakey auth-proxy in front of any RADIUS server (FreeRADIUS, NPS, or MikroTik User Manager) so VPN logins need a phone approval.
12 November 2025
MikroTik VPN 2FA — the complete script-based setup
Step-by-step: add phone-tap two-factor authentication to a MikroTik VPN using RouterOS scripting alone, with no RADIUS server anywhere.
16 September 2025
Multi-factor authentication evaluation guide
What to actually compare when choosing MFA: trust, control, regulation, total cost of ownership, and the user experience that decides adoption.