[Solved] Wireguard VPN server and 2FA?

[mikma]

@Eifelpeter

I am concerned with secure access as root on the GUI of my widely distributed servers.

It seems openssh in OpenWrt supports FIDO2 tokens: Fido U2F SSH authentication (2FA/MFA) - #7 by linosgian

You can disable external access to the GUI and run it on 127.0.0.1 only, and then forward a port via SSH instead.