SSH Locked down

SSH Two-Factor Authentication: Lock your machines with certificates + security codes

Features

30 second installation

Forget those complicated installation procedures. It takes 30 seconds from start to finish to add Authy Two-Factor Authentication to your SSH.

Authorized keys

We know passwords are not safe, we designed Authy SSH to work best with authorized keys.

Mobile Apps or SMS

Someone in your organization doesn't have a smartphone? We got you covered. Authy SSH can send them the token via SMS or a phone call. The rest can install the Authy App for free right to their phones (it even works while your offline).

Review SSH library on Github

Watch the Video

Installation steps

Get your Authy API Key at: https://www.authy.com/signup.
Get the code: https://github.com/authy/authy-ssh

Install it:

sudo bash authy-ssh install /usr/local/bin

Enable it:

sudo /usr/local/bin/authy-ssh enable `whoami`

Test it: authy-ssh test
Restart your ssh server:
```
sudo service ssh restart
```

Troubleshooting

SCP stopped working

Currently SCP breaks, we're working on a way to fix it

FAQ

Is there a way to disable SMS?

Yes, if you'd like to disable SMS altogether send us an e-mail to [email protected]. We'll take care of it.

How does Authy SSH works?

We use the forced-command directive to run our plugin when the user is logging in. After we verify the token we return a shell to the user.

Benefits

Simple deployment

You can easily add SSH Two-Factor Authentication to all of your machines in an instant. It works great with chef or puppet.

Great security

Certificates can be stolen remotely from your machine, but stealing your physical phone is harder. Two-Factor brings a whole new layer of security to your SSH access.

Hassle free

Authy is simple all the way, from the installation to the mobile app's. We take care of all the little details so you can just relax.