2 ms·

But then someone with your key just has direct access?

• RL_Quine 5y ago
  It's a second factor, not first. This is fine.
  • GekkePrutser 5y ago
    But this is not FIDO2 in CTAP (passwordless) mode, which is what the previous poster referred to. It's FIDO1 and it's not supported by default in SSH, only with some PAM plugins. OpenSSH supports FIDO2 passwordless mode natively in the latest versions.