Blog & guides
Guides that end with it working
Configuration walkthroughs, evaluation guidance and deployment stories for the engineer doing the work, commands included.
10 August 2026
eIDAS 2.0 and the EU Digital Identity Wallet: what changes for enterprises
EUDI wallets must be live in every EU state by end of 2026; banks must accept them by 2027. What changes for enterprise authentication, and what does not.
23 July 2026
Passwordless SSO with Notakey: a step-by-step configuration guide
Connect Gitea, Proxmox or any OIDC app to Notakey: create the service, register the client, set per-app password policy. Real commands, real gotchas.
21 July 2026
Ransomware: what MFA actually stops — and what it honestly does not
Colonial Pipeline, Change Healthcare, MGM: most ransomware walks in through an account, not an exploit. Where MFA helps, and where it honestly cannot.
12 July 2026
The real cost of passwords and SMS codes — and the case for a phone tap
Passwords are a help-desk tax and SMS codes are a metered bill that keeps rising. The business case for passwordless, in numbers a CFO can follow.
12 July 2026
MFA fatigue: how attackers walk past the second factor you already bought
Push-bombing, SIM swaps and adversary-in-the-middle beat SMS and one-tap MFA every week. Why it happens, and what phishing-resistant really means.
12 July 2026
NIS2 and authentication: what essential and important entities must change
NIS2 turns strong authentication into a legal duty with board-level liability. What the directive expects from your logins, and how to close the gap.
9 July 2026
Authentication profiles — when Approve should do more than log you in
Attach server-side callbacks to Approve and Deny: open a door from a QR code, activate a VPN network profile, page security on a denied request.
9 July 2026
Push notifications from any script — the appliance as an alert channel
Send informational push notifications to enrolled phones with one curl call: server alerts, on-call pings, price watchers, home automation.
8 July 2026
Add 2FA to a legacy web app — without touching its code
Put a SAML reverse proxy in front of any legacy web application and gate every login with a phone approval, with zero changes to the app itself.
7 July 2026
Linux SSH 2FA with pam_radius — phone approval for SSH and sudo
Phone-approval 2FA for Linux SSH, sudo and su with pam_radius and the Notakey auth-proxy, plus a safe local fallback so you never get locked out.
30 June 2026
MikroTik 2FA for router logins — WinBox, WebFig and SSH
Protect WinBox, WebFig and SSH access to a MikroTik router with phone-approval 2FA over RADIUS: one auth-proxy setting, service=login.
19 May 2026
WordPress and a simple second factor
Add phone-tap two-factor authentication to any WordPress site in six steps with the Notakey provider plugin.
4 March 2026
How to configure WCP for Windows Remote Desktop
Set up the Notakey Windows Credential Provider for two-factor remote desktop login, from appliance config to going passwordless.
20 January 2026
VPN 2FA with RADIUS — the complete auth-proxy setup
Put the Notakey auth-proxy in front of any RADIUS server (FreeRADIUS, NPS, or MikroTik User Manager) so VPN logins need a phone approval.
12 November 2025
MikroTik VPN 2FA without a RADIUS server — full RouterOS script setup
Add phone-tap 2FA to a MikroTik VPN with RouterOS scripting alone — no RADIUS server, no extra infrastructure. A complete copy-paste setup.
16 September 2025
Multi-factor authentication evaluation guide
What to actually compare when choosing MFA: trust, control, regulation, total cost of ownership, and the user experience that decides adoption.