Blog & guides
Guides that end with it working
Configuration walkthroughs, evaluation guidance and deployment stories for the engineer doing the work, commands included.
23 July 2026
Passwordless SSO with Notakey: a step-by-step configuration guide
Connect Gitea, Proxmox or any OIDC app to Notakey: create the service, register the client, set per-app password policy. Real commands, real gotchas.
21 July 2026
Ransomware: what MFA actually stops — and what it honestly does not
Colonial Pipeline, Change Healthcare, MGM: most ransomware walks in through an account, not an exploit. Where MFA helps, and where it honestly cannot.
12 July 2026
The real cost of passwords and SMS codes — and the case for a phone tap
Passwords are a help-desk tax and SMS codes are a metered bill that keeps rising. The business case for passwordless, in numbers a CFO can follow.
12 July 2026
MFA fatigue: how attackers walk past the second factor you already bought
Push-bombing, SIM swaps and adversary-in-the-middle beat SMS and one-tap MFA every week. Why it happens, and what phishing-resistant really means.
12 July 2026
NIS2 and authentication: what essential and important entities must change
NIS2 turns strong authentication into a legal duty with board-level liability. What the directive expects from your logins, and how to close the gap.
9 July 2026
Authentication profiles — when Approve should do more than log you in
Attach server-side callbacks to Approve and Deny: open a door from a QR code, activate a VPN network profile, page security on a denied request.
9 July 2026
Push notifications from any script — the appliance as an alert channel
Send informational push notifications to enrolled phones with one curl call: server alerts, on-call pings, price watchers, home automation.
8 July 2026
Add 2FA to a legacy web app — without touching its code
Put a SAML reverse proxy in front of any legacy web application and gate every login with a phone approval, with zero changes to the app itself.
7 July 2026
Linux SSH 2FA with pam_radius — phone approval for SSH and sudo
Phone-approval 2FA for Linux SSH, sudo and su with pam_radius and the Notakey auth-proxy, plus a safe local fallback so you never get locked out.
30 June 2026
MikroTik router login 2FA — phone approval for WinBox and SSH
Require a phone approval for WinBox, WebFig and SSH logins to a MikroTik router: the same auth-proxy RADIUS setup, pointed at service=login.
19 May 2026
WordPress and a simple second factor
Add phone-tap two-factor authentication to any WordPress site in six steps with the Notakey provider plugin.
4 March 2026
How to configure WCP for Windows Remote Desktop
Set up the Notakey Windows Credential Provider for two-factor remote desktop login, from appliance config to going passwordless.
20 January 2026
VPN 2FA with RADIUS — the complete auth-proxy setup
Put the Notakey auth-proxy in front of any RADIUS server (FreeRADIUS, NPS, or MikroTik User Manager) so VPN logins need a phone approval.
12 November 2025
MikroTik VPN 2FA — the complete script-based setup
Step-by-step: add phone-tap two-factor authentication to a MikroTik VPN using RouterOS scripting alone, with no RADIUS server anywhere.
16 September 2025
Multi-factor authentication evaluation guide
What to actually compare when choosing MFA: trust, control, regulation, total cost of ownership, and the user experience that decides adoption.