I love testing out something new and while having QR Code authentication for WordPress blogs was covered previously, I was recently introduced to Clef and it offered something for my management of 7 WordPress blogs that I haven’t found elsewhere.
Clef is a more secure single sign on system for your WordPress blogs but it does more than WordPress but focusing on WordPress for this article. Clef is basically a 2 part combination, the first part is an iOS/Android application that you find in the app store called Clef and setup, and the second part is the Clef WordPress plugin and then you pair the two together.
Before I show you how to setup Clef on the phone and then your WordPress blog, let me tell you why you would want to use Clef.
Clef allows you to sign on into your WordPress blogs by just holding your phone camera up to the Clef Wave that displays on the screen, it matches the Clef Wave with your Clef profile and automatically logs you into WordPress and controls your session from the Clef mobile phone application. What this allows you to do is basically automatically sign in to your WordPress blogs (7 of them in my case) without ever entering a user name and password, and being able to keep the session alive as long as you need to and terminate all sessions across all sites instantly if you want all from the Clef application.
Part 1 – Installing the Clef Application
Simply go to your app store and download Clef
After you setup Clef you will have to set a passcode for the Clef application, this is the least secure part of Clef and though it uses a highly complicated digital signature every time you login to your website, your access to all of your sites is only as strong as your passcode is on your phone and your Clef application. So this is your weakest link, lose your phone and have your phone and Clef passcode uncovered and the person would have access to your sites. This still is far more secure than a username and password however.
You sync the Clef app with the Clef Wave on the company site as a test and sample so you can see how it works before installing it on your site.
When you have the Clef app open and you are wanting to sync to a website, it will go into camera mode and show you the Clef Wave, you then pair it up with the Clef wave you see on the website in front of you.
The above image shows you the camera with the moving Clef Wave before you try and pair it to your website Clef Wave.
Above is when I am attempting to pair the Clef Wave between phone and the Clef website for a test.
After Clef creates a session, it by default gives you a 1 hour session, but you can set it to unlimited and terminate the session anytime you want.
Here for my sites I set my session for infinity so that I would only ever be signed out of WordPress if I actually click sign out.
Step 2 – Configuring Your WordPress Blog for Clef
All you have to do now is navigate to the WordPress Plugin repository and install the Clef WordPress plugin.
After installing you active the plugin and configure your site by merely confirming the site name and URL.
You then pair up your Clef App on your mobile phone to your website as part of the first time you login, this is how your website becomes built as a profile in your Clef dashboard and shows up in your mobile device. Note, Clef actually pairs each site and the WordPress user you are logged in with to your Clef profile. This means all you have to do is connect and register each site once with your Clef profile and you won’t have to do it again to have single sign on with all those sites. You don’t even have to be using the same username or email on each WordPress site for this to work.
Now, once you have completed this step WordPress should log you out and make you sign in again, however I found I had to click the logout button a few times, Clef did not automatically log me out of WordPress after the setup process.
This is if you have username/password still enabled and login with your phone (Clef) you can configure your Clef WordPress plugin to only allow access to Clef, but I don’t do this because this would force all my guest posters to have to use Clef to guest posts and I am not going to do that, but if you are the only one who logs into your site you can completely delegate the authentication to Clef.
However, you can get granular with Clef settings, I could just make Clef login enforcement for Administrators for example and still allow contributors to use username/password if I wanted.
Looking at the settings on your Mobile Clef application shows you a list of all sites you have paired with your Clef Mobile App.
Now you can see Clef can also automate payments, manage credit cards and is expanding to be a much more diverse mobile security platform that can do more than just a secure authentication. For now however, if you are looking for an easy and secure way to remove the username/password requirements or give you longer sessions (unlimited) for your WordPress blog, or establish SSO so that you can sign in and be active on 7 WordPress sites at the same time with only 1 authentication, then Clef is an ideal solution.
Clef allows you to stop using passwords for your WordPress blogs if you have an iPhone or Android device and best of all, the Clef mobile application and Clef for WordPress are free, so you can go ahead and test Clef today on your WordPress blogs and Android or iPhone device and see if you like the platform.
Download the Clef WordPress Plugin here
Download the Clef iOS or Android Application
You can go to Clef website and get their appstore link emailed to your phone, or simply browse for Clef on your iOS or Android app store.