WiKID

WiKID is an on-premises two-factor authentication server for organizations that want to connect authentication to existing network and directory systems. It suits teams able to run their own server; its broad integration options are the main draw, while self-hosting and annual upfront billing narrow its appeal.

Overview

WiKID pairs a self-hosted server with software token clients and supports a PIN alongside a WiKID token or device. Connections can use RADIUS, LDAP, TACACS+, SAML, native Active Directory, or API and network clients. This gives organizations several ways to fit two-factor authentication into existing infrastructure, but operating the server remains the organization’s responsibility.

Its security approach includes asymmetric keys generated on the device, RSA 4096-bit encryption keys, a hardened virtual-machine appliance, and customizable security parameters. Self-hosting gives organizations control over deployment, but it is a practical advantage only for teams equipped to manage their own authentication environment.

Key features

Protocols and integrations

Alongside its directory and network protocols, WiKID supports integrations with Cisco, Checkpoint, Fortinet, pfSense, and enterprise VPN solutions. That breadth is useful where authentication must work across different network systems. Organizations building custom applications can use API packages for Python, Ruby, Java, C#, and PHP, rather than being limited to the named integrations.

Server and token options

The server is offered as Linux packages, an ISO for virtual appliances or bare metal, and a VirtualBox image. Linux packages are available for RedHat, CentOS, Fedora, and Ubuntu; the recommended 64-bit ISO is based on Rocky 9. Software token clients are available for Windows, Mac, Linux, Android, and iOS. These choices suit organizations with varied deployment environments, although they also place setup and ongoing server operation on the organization.

Pricing

WiKID uses a freemium model. The WiKID Strong Authentication Server free plan costs nothing and supports up to five users, while retaining the enterprise version. That cap makes it a useful starting point for a small team or an initial deployment, but it is not a free path for a larger organization.

Paid plans start at $24/user/yr. Payments are annual and upfront, so the price structure is less suitable for teams that need monthly billing. A three-year license agreement receives a stated 25% discount. Educational and nonprofit institutions receive a 25% discount for 25 seats or more. A 30-day trial gives prospective users a limited period to assess fit before committing.

Platforms

WiKID covers Android, iOS, Linux, macOS, Windows, web, API, and self-hosted deployments. The mix reflects a server-centered product with token clients for desktop and mobile platforms, rather than a hosted authentication service.

Who it's for

WiKID is a strong candidate for organizations that want on-premises control, need to connect two-factor authentication to existing directory or network systems, and can operate the server themselves. Its multiple protocols and API packages also make it relevant to teams integrating authentication with custom applications.

It is a weaker fit for small groups that need more than five users without a paid license, or for organizations that prefer a managed service or monthly payments. The operational demands of self-hosting matter as much as the protocol coverage when choosing it.

Pros and cons

• Pros: Supports RADIUS, LDAP, TACACS+, SAML, native Active Directory, and API or network clients, giving organizations several integration routes.
• Pros: Server formats include Linux packages, an ISO, and a VirtualBox image, with software tokens spanning desktop and mobile platforms.
• Pros: The free enterprise version covers up to five users, and eligible educational and nonprofit institutions can receive a 25% discount for 25 seats or more.
• Cons: The free plan’s five-user ceiling limits its use for larger teams.
• Cons: Paid pricing is annual and upfront, which rules out monthly billing flexibility.
• Cons: Self-hosting requires the organization to provide and operate the authentication server.

Alternatives

Compare multi-factor authentication software if you want to weigh WiKID against a broader category of options.

Protectimus MFA is worth comparing if you want a paid option with a free plan and trial; its listed Custom plan is $2 a month billed per user for an individual, and its Starter plan is $33 a month. LoginTC has a free Cloud Starter plan for up to three users with VPN and firewall protection, making it a comparison point for teams whose needs fit that smaller free tier.

OpenOTP Authentication Server offers a free 25-user plan with limits including 10 SpanKey hosts, one server, and no high availability, which may suit an organization that can work within those caps. LinOTP is a free option developed and maintained by netgo software GmbH. miniOrange Multi-Factor Authentication offers a free plan and a paid Essential plan, and is another option to compare.

Spriv Adaptive MFA has a free Startup plan for up to two users and two servers, with SMS usage billed at carrier cost; that tier may be a better starting point for a very small deployment. Duo Mobile offers a free plan for 10 users and a paid Essentials plan at $3 a month. Entrust Identity App is free to download, but activation requires an organization using Identity Enterprise.

Verdict

Choose WiKID if your organization needs on-premises two-factor authentication, values broad protocol and API integration, and has the capacity to run its own server. The five-user free enterprise version is a useful small-scale entry point, but organizations that need a managed service, monthly billing, or more users without paying should look elsewhere.