# Two-factor Authentication ## **Enable two-factor Authentication** **Two-factor authentication (2FA)** adds an extra layer of security to your Ubuntu system by requiring two forms of identification before granting access. In addition to the usual username and password, 2FA requires an additional piece of information, such as a one-time password (OTP) generated by an authenticator app. First of all, download the Google Authenticator app on your mobile device

Here are some methods to enable 2FA on Ubuntu: ### Install the Google Authenticator PAM plugin:

sudo apt-get update -y

``` sudo apt-get install libpam-google-authenticator -y ``` Run the google-authenticator command as the user you want to log in (**not** as root): ``` sudo google-authenticator ``` Follow the prompts to set up 2FA. You’ll need an authenticator app (e.g., Google Authenticator or Authy) on your mobile device to scan the QR code.

### Edit the pam.d file Edit the **/etc/pam.d/sshd** file and add the following line at the end. ``` vi /etc/pam.d/sshd ``` **auth required pam\_google\_authenticator.so**

save the file and exit Edit the **/etc/ssh/sshd\_config** file ``` vi /etc/ssh/sshd_config ``` **KbdInteractiveAuthentication no > Yes**

### Restart the service Edited both the file restart service ``` systemctl restart sshd.service ``` Open the Command prompt to access the server **ssh user\@IP\_Addresss** Enter the password and the verification code from your Google Authenticator app on your mobile device.