Blog & guides
Guides that end with it working
Configuration walkthroughs, evaluation guidance and deployment stories for the engineer doing the work, commands included.
11 October 2026
Palo Alto GlobalProtect 2FA over RADIUS, without a separate RADIUS server
Add phone-approval 2FA to Palo Alto GlobalProtect with the Notakey auth-proxy and RADIUS plugin. Timeouts, protocol and double-prompt fixes.
8 October 2026
FortiBleed: why a leaked password was enough to take over a FortiGate
FortiBleed needed no exploit. It logged in with leaked, sprayed and cracked passwords. What stops that, what does not, and what to check on a FortiGate.
21 September 2026
From zero to your first phone approval: a Notakey cloud setup
Create a cloud instance, a service, an onboarding requirement and a user, enrol a phone and send a test approval: the setup every Notakey guide assumes.
10 August 2026
eIDAS 2.0 and the EUDI wallet: the 2026–2027 deadlines and what they mean for enterprises
EU states must offer identity wallets by end of 2026; banks and other regulated firms must accept them by end of 2027. What it means for enterprise logins.
23 July 2026
Passwordless SSO with Notakey: a step-by-step configuration guide
Connect Gitea, Proxmox or any OIDC app to Notakey: create the service, register the client, set per-app password policy. Real commands, real gotchas.
21 July 2026
Ransomware: what MFA actually stops — and what it honestly does not
Colonial Pipeline, Change Healthcare, MGM: most ransomware walks in through an account, not an exploit. Where MFA helps, and where it honestly cannot.
12 July 2026
The real cost of passwords and SMS codes — and the case for a phone tap
Passwords are a help-desk tax and SMS codes are a metered bill that keeps rising. The business case for passwordless, in numbers a CFO can follow.
12 July 2026
MFA fatigue, push-bombing and 2FA bombing: how attackers get past your second factor
Push-bombing (2FA bombing), SIM swaps and adversary-in-the-middle get past SMS and one-tap MFA. How each one works, what stops it, and what does not.
12 July 2026
NIS2 and authentication: what essential and important entities must change
NIS2 turns strong authentication into a legal duty with board-level liability. What the directive expects from your logins, and how to close the gap.
9 July 2026
Authentication profiles — when Approve should do more than log you in
Attach server-side callbacks to Approve and Deny: open a door from a QR code, activate a VPN network profile, page security on a denied request.
9 July 2026
Push notifications from any script — the appliance as an alert channel
Send informational push notifications to enrolled phones with one curl call: server alerts, on-call pings, price watchers, home automation.
8 July 2026
Add 2FA to a legacy web app — without touching its code
Put a SAML reverse proxy in front of any legacy web application and gate every login with a phone approval, with zero changes to the app itself.
7 July 2026
Linux SSH 2FA with pam_radius — phone approval for SSH and sudo
Phone-approval 2FA for Linux SSH, sudo and su with pam_radius and the Notakey auth-proxy, plus a safe local fallback so you never get locked out.
30 June 2026
MikroTik 2FA for router logins — WinBox, WebFig and SSH
Protect WinBox, WebFig and SSH access to a MikroTik router with phone-approval 2FA over RADIUS: one auth-proxy setting, service=login.
19 May 2026
WordPress and a simple second factor
Add phone-tap two-factor authentication to any WordPress site in six steps with the Notakey provider plugin.
4 March 2026
Windows Remote Desktop 2FA: phone approval for RDP logins
Add two-factor authentication to Windows Remote Desktop with the Notakey Windows Credential Provider: appliance setup, registry file, passwordless logins.
20 January 2026
VPN 2FA with RADIUS — the complete auth-proxy setup
Put the Notakey auth-proxy in front of any RADIUS server (FreeRADIUS, NPS, or MikroTik User Manager) so VPN logins need a phone approval.
12 November 2025
MikroTik VPN 2FA without a RADIUS server — full RouterOS script setup
Add phone-tap 2FA to a MikroTik VPN with RouterOS scripting alone — no RADIUS server, no extra infrastructure. A complete copy-paste setup.
16 September 2025
Multi-factor authentication evaluation guide
What to actually compare when choosing MFA: trust, control, regulation, total cost of ownership, and the user experience that decides adoption.