4 ms·

I don't have any PIN entry at all with FIDO.

• Sharparam 5y ago
  But then someone with your key just has direct access?
  • RL_Quine 5y ago
    It's a second factor, not first. This is fine.
    • GekkePrutser 5y ago
      But this is not FIDO2 in CTAP (passwordless) mode, which is what the previous poster referred to. It's FIDO1 and it's not supported by default in SSH, only with some PAM plugins. OpenSSH supports FIDO2 passwordless mode natively in the latest versions.