google-authenticator

google-authenticator binary included in libpam-google-authenticator package

Configuration:

• /etc/pam.d/sshd
• ~/.google_authenticator

Make tokens “time-base”": yes
Update the .google_authenticator file: yes
Disallow multiple uses: yes
Increase the original generation time limit: no
Enable rate-limiting: yes

Related

• pam_tally2
• brew install google-authenticator-libpam

See also

• google-authenticator, qrencode
• Google Authenticator, libpam-google-authenticator, google-authenticator-libpam (macOS), google-authenticator
• MFA: FreeOTP, Google Authenticator, Okta Verify, Duo Security, Microsoft Authenticator, Strong customer authentication, Dualshield, HOTP, TOTP, OATH, Authy, Push authentication, google-authenticator, Duo Mobile, DenyAllExceptListedIfNoMFA, Configure MFA on AWS, LastPass Authenticator mobile app