SSH password two-factor authentication

Anyone SSH-ing in to theor accounts on oak.waxworlds.org with a password will now also find that they need to enter a verification code in addition to their password.

We're using Google Authenticator (which is a procedure to perform time-based one-time password authentication, not a Google service).

If you use SSH with keys, these will continue to work as before. Two-factor authentication is only used alongside password authentication.

Users wanting to be able to SSH in with a password will need to either

1. contact me, and I will set up a secret key for your account, or

2. run google-authenticator from the command line on oak to set it up for themselves. The command will generate your secret key, ask you a few questions and then save a local ~/.google_authenticator configuration file.

You will probably want to install the Google Authenticator app on your phone/tablet/watch (it is free/libre and open source and available on F-Droid). There are also several other FOSS OTP authenticator apps that are compatible.