# Fido U2F SSH authentication (2FA/MFA)

**URL:** <https://forum.openwrt.org/t/fido-u2f-ssh-authentication-2fa-mfa/68872>\
**Category:** Network and Wireless Configuration\
**Created:** [July 9, 2020, 8:45am UTC](https://forum.openwrt.org/t/fido-u2f-ssh-authentication-2fa-mfa/68872 "2020-07-09T08:45:04Z")\
**Posts on this page:** 1\
**Showing post:** 7

<div class="post-metadata">

**Author:** ![linosgian](https://forum.openwrt.org/user_avatar/forum.openwrt.org/linosgian/32/29763_2.png) [@linosgian](https://forum.openwrt.org/u/linosgian)\
**Post date:** [January 5, 2021, 8:44pm UTC](https://forum.openwrt.org/t/fido-u2f-ssh-authentication-2fa-mfa/68872/7 "2021-01-05T20:44:25Z")

</div>

Hi, I've recently bought a Solokey, which implements FIDO2 as well and I have been using it on my router for a while now.

Since OpenSSH is already on 8.4p on master, I've opened a [PR](https://github.com/openwrt/packages/pull/14415) to add support for all FIDO2 keys on the official OpenWRT `openssh-server` package.

Also, a few notes: libsk-libfido2 is not required anymore by OpenSSH anymore.  
All that's needed is libcbor, libfido2 itself and OpenSSH to be compiled with the `--with-security-key-builtin` flag.

If anyone wants to compile their own `openssh-server` package, feel free to use this [PR](https://github.com/openwrt/packages/pull/14415). Hopefully it'll get merged at some point and it'll probably land on the next OpenWRT release.

Instead of building your own OpenWRT image from scratch, you can just build the openssh-server package using the compiled OpenWRT SDK for your current version. You can find more information [here](https://github.com/mwarning/openwrt-examples/blob/master/openwrt-sdk.md)

---

_[View the full topic](https://forum.openwrt.org/t/fido-u2f-ssh-authentication-2fa-mfa/68872)._