Linux How To

Download: jauth_0.2.0_amd64.deb
SHA256: 0a09b9acc01bb1c4286ee9a7183813ef20a466082e321a986c2dd2cac6967601

sudo apt install ./jauth_0.2.0_amd64.deb
jauthd pair # scan the QR code with the app, check the codes match
systemctl –user enable –now jauthd
echo ‘export SSH_AUTH_SOCK=”$XDG_RUNTIME_DIR/jauth/agent.sock”‘ >> ~/.bashrc

Open a new terminal, then:

jauth-cli status # should say the phone is connected
jauth-cli getpub “Main Key” # add this line to ~/.ssh/authorized_keys on the server
ssh you@your-server # approve on the phone

To pair again later, stop the service first (systemctl –user stop jauthd), run jauthd pair, then start the service again.

If you say no on the phone, ssh moves on to any other keys it can find, such as files in ~/.ssh. So a server that also trusts one of those keys will still let you in. To make the phone the only way in, remove the other keys from that server’s authorized_keys.