WiKID

WiKID is an organizational two-factor authentication system built around a server the customer runs on its own infrastructure. It suits teams that need to connect authentication to network or directory services and can manage that deployment. Its broad integration options and five-user free tier are compelling; the self-hosted requirement and annual upfront billing narrow the fit.

Overview

WiKID combines a self-hosted authentication server with software token clients. Users authenticate with a PIN and a WiKID software token or device, while organizations can integrate through RADIUS, LDAP, TACACS+, SAML, native Active Directory, or API and network clients. This makes it relevant to environments with varied existing systems, rather than teams looking for a turnkey hosted service.

The maker describes device-generated asymmetric keys, a hardened VM appliance, RSA 4096-bit encryption keys, and configurable security parameters. These controls give organizations options for managing their authentication environment, but they come with responsibility for running and maintaining the server.

Key features

Integration and application support

The protocol range covers network access and directory integration, and named compatible tools include Cisco, Checkpoint, Fortinet, pfSense, and enterprise VPN solutions. For organizations with those systems, the choice of integration paths can reduce the need to reshape existing infrastructure around a single connection method. Developers can also use API packages for Python, Ruby, Java, C#, and PHP to add two-factor authentication to custom applications.

Deployment and tokens

The server is available as Linux packages, an ISO for virtual appliances or bare metal, and a VirtualBox image. Linux packages cover RedHat, CentOS, Fedora, and Ubuntu; the recommended 64-bit ISO is based on Rocky 9. Token clients are offered for Windows, Mac, Linux, Android, and iOS. This spread supports organizations with mixed server and client environments, though it does not change the operational work inherent in self-hosting.

WiKID also supports device trust controls. Its security configuration options and deployment formats will matter most to teams that want direct control over where authentication runs and how it connects to their systems.

Pricing

WiKID uses a freemium model, with the WiKID Strong Authentication Server free at free for up to 5 users. The plan is an enterprise version, so it offers a way for a small organization or evaluation group to use the product without a license charge; the five-user cap makes it unsuitable as a lasting free tier for larger deployments.

Paid pricing starts at $24/user/yr, with annual upfront payments. A 30-day trial is available. The maker states a 25% discount for a three-year license agreement, and educational and nonprofit institutions receive a 25% discount for 25 seats or more. The upfront annual term favors organizations able to budget by year; it is less convenient for buyers who need monthly billing or want to expand gradually without a longer commitment.

Platforms

WiKID supports Android, iOS, Linux, macOS, Windows, web, API, and self-hosted deployments. The server's Linux packages and ISO options provide several routes to an on-premises installation, while token clients span desktop and mobile operating systems. Documentation, installation instructions, and support forums are provided for teams responsible for deployment.

Who it's for

WiKID is a strong match for organizations that require on-premises two-factor authentication, already operate network or directory infrastructure, and have staff able to run the server. Its protocol coverage and language-specific API packages make it especially pertinent where authentication must reach both established systems and custom applications.

It is a weaker fit for organizations that want the vendor to host authentication or prefer monthly billing. Teams with fewer than six users can start on the free plan, but organizations growing beyond that threshold need to account for paid licensing.

Pros and cons

Broad integration choices: RADIUS, LDAP, TACACS+, SAML, native Active Directory, and API or network clients suit organizations with varied infrastructure.

Multiple server deployment formats: Linux packages, a virtual-appliance or bare-metal ISO, and a VirtualBox image give administrators options for running the server.

Free entry point: The enterprise version costs nothing for up to 5 users, which can serve a small deployment before licensing is needed.

Self-hosting demands internal operations: Organizations must provide and manage the server environment rather than rely on a hosted service.

Annual upfront payment: The paid term is less flexible than monthly billing, despite the stated discount for three-year agreements and qualifying institutions.

Alternatives

For a wider comparison, see Multi-Factor Authentication Software.

Protectimus MFA is a paid alternative with a free plan and trial, and its listed platforms include Android, iOS, Linux, macOS, web, Windows, API, and self-hosting.

HYPR Authenticate is a paid alternative with a free plan and trial; its listed platforms include Android, iOS, Linux, macOS, web, Windows, and API.

LinOTP is a free alternative with Android, iOS, Linux, Windows, web, API, and self-hosted support; it may suit organizations seeking an open-source option.

LoginTC offers a freemium plan with a free tier for up to 3 users and lists VPN and firewall protection on that tier, making it an option for teams whose needs fit that smaller allowance.

miniOrange Multi-Factor Authentication has a free plan and trial, with listed support for Linux, macOS, self-hosting, web, and Windows.

OpenOTP Authentication Server offers a freeware plan for up to 25 users, one server, and no high availability, which may fit a team prioritizing a larger free allowance.

Spriv Adaptive MFA has a freemium Startup plan for up to 2 users and 2 servers, with SMS usage billed at carrier cost.

Deepnet DualShield MFA Platform supports on-premises or private-cloud deployment and uses custom pricing, making it an alternative for organizations considering either hosting model.

Verdict

Choose WiKID if your organization needs on-premises two-factor authentication, values several integration routes, and can operate its own server. The five-user free enterprise version is a practical starting point, and API packages extend its reach to custom applications. Look elsewhere if you need a hosted service, monthly billing, or a free tier that accommodates more than five users.