# \[Solved\] Wireguard VPN server and 2FA?

**URL:** <https://forum.openwrt.org/t/solved-wireguard-vpn-server-and-2fa/106972>\
**Category:** Installing and Using OpenWrt\
**Created:** [September 20, 2021, 3:05pm UTC](https://forum.openwrt.org/t/solved-wireguard-vpn-server-and-2fa/106972 "2021-09-20T15:05:04Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![mikma](https://forum.openwrt.org/letter_avatar/mikma/32/5_5575768a8748004e209b776fc1b2916d.png) [@mikma](https://forum.openwrt.org/u/mikma)\
**Post date:** [September 20, 2021, 4:30pm UTC](https://forum.openwrt.org/t/solved-wireguard-vpn-server-and-2fa/106972/4 "2021-09-20T16:30:49Z")

</div>

> [@Eifelpeter](#):
>
> I am concerned with secure access as root on the GUI of my widely distributed servers.

It seems openssh in OpenWrt supports FIDO2 tokens: [Fido U2F SSH authentication (2FA/MFA) - #7 by linosgian](https://forum.openwrt.org/t/fido-u2f-ssh-authentication-2fa-mfa/68872/7)

You can disable external access to the GUI and run it on 127.0.0.1 only, and then forward a port via SSH instead.

---

_[View the full topic](https://forum.openwrt.org/t/solved-wireguard-vpn-server-and-2fa/106972)._