How To Setup MFA for Linux Login (SSH, Console, Sudo)

This videos shows how to set up multi factor authentication (MFA / 2FA) for Linux device login using Google Authenticator. MFA is configured for three separate use cases including SSH MFA, local console MFA, and local console MFA with sudo MFA.
Join my Discord server: discord.gg/9CvTtHqWCX
Follow me on Twitter: / 0xconda
If you found this video helpful and would like to support future creations, please considering visiting the following links:
Patreon: / conda
Buy Me a Coffee: www.buymeacoff...
Amazon affiliate link (anything purchased through this link will provide me with a small commission): amzn.to/3hsHzD2
Google Authenticator pam module repo: github.com/goo...

[@andyli]

Good to see you making videos again!

[@c0nd4]

Thanks! It's great to be back

[@itsnee]

Very informative! Thank you 🔥

[@c0nd4]

Appreciate the support!

[@avinashsharma5234]

Hey there, nice video.
By the way I noticed you going to end of line and then pressing "i" to write on a new line in vim. Just a tip: you can skip all of that by pressing "o" while being on the line and not going to the end of it :)

[@lalithkumar1029]

I just tried to scan conda's qr code and thats it ! I did got the access to conda's authenticator. I hope conda is not using the same right now ! 😂😂

[@c0nd4]

Haha nope, that was just a burner for this video

[@lalithkumar1029]

@@c0nd4 Oh Nice!! 😂

[@merajrabbani]

Excellent video

[@c0nd4]

Thank you!

[@enleak]

Pog!!

[@VladaNish]

Great video

[@c0nd4]

Thank you!

[@AndroidEnrollment-l3v]

We would like to do with OKTA MFA for users on Ubuntu 22.04

[@justplayinggames963]

i'm using ssh to connect to my linux server - in the same network - and i'm using the public key method - only my key can connect to the server
and only from my computer .
I have linux mint distro
made every step you said 1 by 1 and still - i'm not getting prompt for google authentication when trying to log in with ssh
and now i cannot access the server with xrdp - and the only MFA authentication i get is when i'm trying to log
to the server directly ( not via remote service )
you should add a tutorial - how to reverse the installation and the configuration - cause apperantly - sudo apt purge libpam-google-authenticatior doesn't do anything except deleting the package files

[@adriangratzl]

Nice video!
Is it possible, to use push notification instead of the verification code?
Is it also possible, to use the authenticator with openVPN?
I want to enable the MFA while connecting to my home network with OpenVPN.

[@SiyaTech-jw1bm]

I tried to MFA configure in my ubuntu 20.4 desktop as you provided guideline but my mfa is not working. when i access with ssh it is asking me password but password dose not worked. help

[@JanBetermieux]

If you want to have the google MFA only for sudo commands and not for every login/lock edit the /etc/pam.d/sudo instead of /etc/pam.d/common-auth
As advise, always, before you start, have a (temporary) backup plan to regain root access if this fails

[@knowledgelover2736]

What about for SSH log in with PEM and PPK key files? Also, what about SCP? Is there anything there that needs to be configured?

[@knowledgelover2736]

clarifying. When i ssh in using a key file, i am not prompted for the authenticator password

[@StealthFishing]

having troubles with the vim? Do I need to install something else?

[@gisselleguzman381]

vim should come preinstalled. If vim doesn't work try vi. Press insert to edit files, then when done press ESC key then : wq to save the file.

[@johnjoerice]

These steps wouldn't work for me until I added "AuthenticationMethods publickey,password publickey,keyboard-interactive" to /etc/ssh/sshd_config