
For those with a FIDO key like the YubiKey or Google Titan Security Key for handling two-factor authentication, OpenSSH 8.4 has better support in place. OpenSSH 8.4 now supports FIDO keys that require a PIN code to be entered for each use, SSHD now supports a "verify-required" option to require FIDO signatures assert the token be verified






