Hacker News Reader

I use a key-pair for github ssh. I don't use any password managers, instead I have unique long passwords. What's my second factor without a cellphone?

View on HN

You can use OATHTOOL [1] on the command line or even roll your own TOTP implementation [2] in just a few lines of code in your favorite programming language.

[1] https://www.nongnu.org/oath-toolkit/oathtool.1.html [2] https://datatracker.ietf.org/doc/html/rfc6238

I don’t believe this 2FA announcement applies to SSH access. The public key you use is already 2FA enabled, in a sense (the key is what you have, the password to unlock it what you know).

This applies to logging in to the GitHub Web application.

Reply on news.ycombinator.com