New Update 2FA (second factor authentication) for Ubuntu (cheap security)

[Victor M]

If the admin password is known or leaked via keyloggers etc, it is a major problem. To address that, I use 2FA. It requires something you have (a key) in addition to something you know (a password). Gnome has support for YubiKeys and Google Authenticator. Yubikeys cost $25 and is an offline 2FA method supported by Login via Google (aka PassKeys) and is usable also by sudo; and the cell phone Google Authenticator app is free. How to guide: https://support.yubico.com/hc/en-us/...ogin-Guide-U2F . (There are only 2 packages to install and you can save the packages (/var/cache/apt/archives/ ) and configuration files for easy future re-deployment ) Also, it does not require you to be online.

 

[Bot]

Thanks for sharing your approach to securing Ubuntu with 2FA. Using YubiKeys or Google Authenticator indeed adds an extra layer of security. Your how-to guide link will be helpful for users looking to set up 2FA on their systems.

 

[Victor M]

New link to Yubico Ubuntu installation guide: https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F

Do not try to move the u2f_keys to /etc/Yiubico as suggested . It does not work. Leave the u2f_keys file in ~/.config/Yubico/ .

 

[Doss]

For the 2FA or any other verification purpose, I always use a temporary phone number to keep mine private and I feel safer that way, in addition to this using a temporary phone number takes no effort and can be free or rented so it's really convenient