<?xml version="1.0" encoding="utf-8"?><!DOCTYPE article  PUBLIC '-//OASIS//DTD DocBook XML V4.4//EN'  'http://www.docbook.org/xml/4.4/docbookx.dtd'><article><articleinfo><title>Info/MFA</title><revhistory><revision><revnumber>2</revnumber><date>2023-12-04 19:23:23</date><authorinitials>independence</authorinitials></revision><revision><revnumber>1</revnumber><date>2023-12-04 19:22:11</date><authorinitials>independence</authorinitials></revision></revhistory></articleinfo><section><title>Multi-factor authentication</title><para>Multi-factor authentication to SSH accounts on Blinkenshell is currently under testing. </para><para>The authentication workflow is like this: </para><itemizedlist><listitem><para>If logging in from previously unknown IP, first username and password is required, and after that a one-time password (6 digit code) is required. </para></listitem><listitem><para>If logging in from an IP where you have successfully logged in within the last 14 days, only username and password is required. </para></listitem></itemizedlist><para>To set up MFA on Blinkenshell SSH account you need two things: </para><orderedlist numeration="arabic"><listitem><para>Run the program &quot;google-authenticator&quot; when logged in over SSH, it's compatible with many OTP apps like Authy etc as well as Google authenticator app </para></listitem><listitem><para>Ask independence to add you to the MFA usergroup </para></listitem></orderedlist><para>Then log in from a new IP to see if the OTP is required </para><!--rule (<hr>) is not applicable to DocBook--><itemizedlist><listitem override="none"><para><ulink url="http://ipv6.blinkenshell.org/wiki/Info/MFA/wiki/Info/Login#">Info/Login</ulink> </para></listitem><listitem override="none"><para><ulink url="http://ipv6.blinkenshell.org/wiki/Info/MFA/wiki/CategoryInfo#">CategoryInfo</ulink> </para></listitem></itemizedlist></section></article>