WiKID

WiKID is a self-hosted two-factor authentication system for organizations that need to connect authentication to network, directory, and custom applications. It is best for teams able to operate their own authentication server and wanting broad protocol coverage rather than a managed service. The five-user free edition lowers the barrier to a small deployment, while annual upfront licensing and self-hosting make it less suitable for organizations seeking monthly, hosted administration.

Overview

WiKID combines an on-premises authentication server with software token clients. Users authenticate with a PIN and a WiKID software token or device. Because the server stays in the organization’s environment, teams retain control over deployment and configuration but also take responsibility for installation, maintenance, and availability.

Security features include asymmetric keys generated on the device, a hardened virtual-machine appliance, RSA 4096-bit encryption keys, and customizable security parameters. These controls are relevant where policy or infrastructure requirements favor local control. They are less compelling for a small organization without staff to run a security service.

Key features

Integration and application support

WiKID supports RADIUS, LDAP, TACACS+, SAML, native Active Directory, and API or network clients. The range gives administrators several ways to connect VPNs, directories, network equipment, and applications without committing to one integration pattern. Compatible tools named by the maker include Cisco, Checkpoint, Fortinet, pfSense, and enterprise VPN solutions.

For custom software, API packages are provided for Python, Ruby, Java, C#, and PHP. That is a practical advantage for development teams that need to add two-factor authentication to an application rather than rely solely on a packaged connector.

Deployment and administration

The server is distributed as Linux packages, an ISO for virtual appliances or bare metal, and a VirtualBox image. Packages cover RedHat, CentOS, Fedora, and Ubuntu; the recommended 64-bit ISO is based on Rocky 9. Documentation, installation instructions, and support forums provide operational guidance, but the deployment model still requires in-house infrastructure ownership.

Pricing

The WiKID Strong Authentication Server free plan costs nothing and supports up to 5 users. It is an enterprise version, making it useful for a proof of concept, a very small organization, or a tightly limited deployment; the five-user ceiling quickly rules it out for larger teams.

Paid service starts at $24/user/yr. Pricing uses annual upfront payments, so budgeting is straightforward but monthly cash-flow flexibility is limited. A three-year license agreement receives a stated 25% discount. Educational and nonprofit institutions receive a 25% discount when purchasing 25 seats or more. A 30-day trial is available, allowing organizations to assess fit before committing.

Platforms

WiKID supports Android, iOS, Windows, MacOS, Linux, web access, APIs, and self-hosted deployment. Token clients are offered for Windows, Mac, Linux, Android, and iOS. The combination suits organizations with mixed device fleets, while the server formats cover both virtualized and bare-metal environments.

Who it's for

WiKID fits organizations that need on-premises authentication, have existing RADIUS, LDAP, TACACS+, SAML, or Active Directory infrastructure, and can run a server themselves. It is also a sensible candidate for teams integrating two-factor authentication into custom applications through its language-specific APIs. Organizations wanting a hosted service, minimal infrastructure work, or monthly billing should look elsewhere.

Pros and cons

• Pros: Broad protocol support covers network, directory, federation, and API integration needs.
• Pros: Self-hosting, device-generated asymmetric keys, hardened appliance options, and RSA 4096-bit keys support organizations with strict control requirements.
• Pros: Clients span major desktop and mobile platforms, and the free plan supports up to five users.
• Cons: Self-hosted operation shifts server deployment and ongoing administration to the customer.
• Cons: Annual upfront payment is less flexible than monthly licensing.
• Cons: The free tier’s five-user limit is too restrictive beyond very small teams or evaluation use.

Alternatives

Protectimus MFA is a paid, freemium option with a 2.00 USD per-user monthly Custom plan and broader plan choices for organizations preferring monthly billing.

LinOTP is a free, open-source alternative for teams that want AGPLv3/GPLv2 software.

LoginTC offers a free Cloud Starter plan for up to three users and may suit teams starting with a smaller cloud-oriented deployment.

miniOrange Multi-Factor Authentication is a paid option with a free starting plan for individuals.

OpenOTP Authentication Server offers a freeware plan for up to 25 users with one server and no high availability.

Spriv Adaptive MFA has a free Startup plan for up to two users and two servers.

Entrust Identity App is free to download, but activation requires an organization using Identity Enterprise.

Duo Mobile provides a free plan for up to 10 users and is a smaller-platform alternative focused on Android and iOS.

Verdict

Choose WiKID for a self-managed authentication deployment that must integrate with varied network, directory, federation, and application environments. Its strongest case is control combined with protocol breadth and cross-platform tokens. Look elsewhere if you want the provider to run the service, need more than five users on a no-cost tier, or require monthly rather than annual upfront licensing.