Passwordless authentication and transaction signing for enterprises. On-premise or in the cloud.https://www.notakey.com/enhttps://www.notakey.com/blog/palo-alto-globalprotect-2fa-radius/https://www.notakey.com/blog/palo-alto-globalprotect-2fa-radius/Add phone-approval 2FA to Palo Alto GlobalProtect with the Notakey auth-proxy and RADIUS plugin. Timeouts, protocol and double-prompt fixes.Sun, 11 Oct 2026 00:00:00 GMThttps://www.notakey.com/blog/fortibleed-firewall-vpn-passwords/https://www.notakey.com/blog/fortibleed-firewall-vpn-passwords/FortiBleed needed no exploit. It logged in with leaked, sprayed and cracked passwords. What stops that, what does not, and what to check on a FortiGate.Thu, 08 Oct 2026 00:00:00 GMThttps://www.notakey.com/blog/first-phone-approval-from-zero/https://www.notakey.com/blog/first-phone-approval-from-zero/Create a cloud instance, a service, an onboarding requirement and a user, enrol a phone and send a test approval: the setup every Notakey guide assumes.Mon, 21 Sep 2026 00:00:00 GMThttps://www.notakey.com/blog/eidas-2-eudi-wallet-enterprise-authentication/https://www.notakey.com/blog/eidas-2-eudi-wallet-enterprise-authentication/EU states must offer identity wallets by end of 2026; banks and other regulated firms must accept them by end of 2027. What it means for enterprise logins.Mon, 10 Aug 2026 00:00:00 GMThttps://www.notakey.com/blog/passwordless-sso-step-by-step-configuration/https://www.notakey.com/blog/passwordless-sso-step-by-step-configuration/Connect Gitea, Proxmox or any OIDC app to Notakey: create the service, register the client, set per-app password policy. Real commands, real gotchas.Thu, 23 Jul 2026 00:00:00 GMThttps://www.notakey.com/blog/ransomware-what-mfa-stops-and-what-it-doesnt/https://www.notakey.com/blog/ransomware-what-mfa-stops-and-what-it-doesnt/Colonial Pipeline, Change Healthcare, MGM: most ransomware walks in through an account, not an exploit. Where MFA helps, and where it honestly cannot.Tue, 21 Jul 2026 00:00:00 GMThttps://www.notakey.com/blog/cost-of-passwords-and-sms-codes/https://www.notakey.com/blog/cost-of-passwords-and-sms-codes/Passwords are a help-desk tax and SMS codes are a metered bill that keeps rising. The business case for passwordless, in numbers a CFO can follow.Sun, 12 Jul 2026 00:00:00 GMThttps://www.notakey.com/blog/mfa-fatigue-push-bombing/https://www.notakey.com/blog/mfa-fatigue-push-bombing/Push-bombing (2FA bombing), SIM swaps and adversary-in-the-middle get past SMS and one-tap MFA. How each one works, what stops it, and what does not.Sun, 12 Jul 2026 00:00:00 GMThttps://www.notakey.com/blog/nis2-authentication-checklist/https://www.notakey.com/blog/nis2-authentication-checklist/NIS2 turns strong authentication into a legal duty with board-level liability. What the directive expects from your logins, and how to close the gap.Sun, 12 Jul 2026 00:00:00 GMThttps://www.notakey.com/blog/authentication-profiles-approve-to-trigger-anything/https://www.notakey.com/blog/authentication-profiles-approve-to-trigger-anything/Attach server-side callbacks to Approve and Deny: open a door from a QR code, activate a VPN network profile, page security on a denied request.Thu, 09 Jul 2026 00:00:00 GMThttps://www.notakey.com/blog/push-notifications-from-shell-scripts/https://www.notakey.com/blog/push-notifications-from-shell-scripts/Send informational push notifications to enrolled phones with one curl call: server alerts, on-call pings, price watchers, home automation.Thu, 09 Jul 2026 00:00:00 GMThttps://www.notakey.com/blog/2fa-for-legacy-web-apps/https://www.notakey.com/blog/2fa-for-legacy-web-apps/Put a SAML reverse proxy in front of any legacy web application and gate every login with a phone approval, with zero changes to the app itself.Wed, 08 Jul 2026 00:00:00 GMThttps://www.notakey.com/blog/linux-ssh-2fa-with-pam-radius/https://www.notakey.com/blog/linux-ssh-2fa-with-pam-radius/Phone-approval 2FA for Linux SSH, sudo and su with pam_radius and the Notakey auth-proxy, plus a safe local fallback so you never get locked out.Tue, 07 Jul 2026 00:00:00 GMThttps://www.notakey.com/blog/mikrotik-router-login-2fa/https://www.notakey.com/blog/mikrotik-router-login-2fa/Protect WinBox, WebFig and SSH access to a MikroTik router with phone-approval 2FA over RADIUS: one auth-proxy setting, service=login.Tue, 30 Jun 2026 00:00:00 GMThttps://www.notakey.com/blog/wordpress-and-simple-second-factor/https://www.notakey.com/blog/wordpress-and-simple-second-factor/Add phone-tap two-factor authentication to any WordPress site in six steps with the Notakey provider plugin.Tue, 19 May 2026 00:00:00 GMThttps://www.notakey.com/blog/how-to-configure-wcp-for-windows-remote-desktop-connection/https://www.notakey.com/blog/how-to-configure-wcp-for-windows-remote-desktop-connection/Add two-factor authentication to Windows Remote Desktop with the Notakey Windows Credential Provider: appliance setup, registry file, passwordless logins.Wed, 04 Mar 2026 00:00:00 GMThttps://www.notakey.com/blog/2fa-vpn-radius/https://www.notakey.com/blog/2fa-vpn-radius/Put the Notakey auth-proxy in front of any RADIUS server (FreeRADIUS, NPS, or MikroTik User Manager) so VPN logins need a phone approval.Tue, 20 Jan 2026 00:00:00 GMThttps://www.notakey.com/blog/mikrotik-vpn-2fa-with-script/https://www.notakey.com/blog/mikrotik-vpn-2fa-with-script/Add phone-tap 2FA to a MikroTik VPN with RouterOS scripting alone — no RADIUS server, no extra infrastructure. A complete copy-paste setup.Wed, 12 Nov 2025 00:00:00 GMThttps://www.notakey.com/blog/multi-factor-authentication-evaluation-guide/https://www.notakey.com/blog/multi-factor-authentication-evaluation-guide/What to actually compare when choosing MFA: trust, control, regulation, total cost of ownership, and the user experience that decides adoption.Tue, 16 Sep 2025 00:00:00 GMT