I typically require both when others are involved since proper key security can't be enforced (hardware 2FA is the dream). AuthenticationMethods requiring both

I typically require both when others are involved since proper key security can't be enforced (hardware 2FA is the dream). AuthenticationMethods requiring both wasn't availabe in OpenSSH prior to v6.2 (May 2013)[1] and I'm on Windows anyway so I went with https://www.bitvise.com/ssh-server https://www.bitvise.com/ssh-server. https://serverfault.com/a/562899 https://serverfault.com/a/562899