Arch Linux, Debian 10+ and Ubuntu 20.04+ are known to be compatible, anything else may work if it provides a version of OpenSSH 8.2 or later.A local Linux installation or Windows installation (With Ubuntu or Debian installed through Windows Subsystem for Linux).A server running Debian 10, either dedicated or virtual.That said, these instructions are designed to be used by people of any skill level, and it's likely you'll learn something new along the way! :) Since this tutorial gets involved in the build process of Debian packages, it may seem a little complicated or involved at times.

To keep up to date with security issues you should subscribe to Debian's security mailing list or an equivalent for your distribution. Keep in mind that building the software from source will mean that you won't receive updates for it via apt like the rest of your software. It should behave fine since it is just a simple backport.

To do this we'll need to compile and build the latest version (8.3 at time of writing) of OpenSSH from the next version of Debian (11/Bullseye) in a way that it will work nicely with Debian 10. In this tutorial we will be focusing on the support that OpenSSH has for these protocols, and getting it set up for you to authenticate to your server or cloud instance running Debian 10 (Stable). The fact that the object is physical and works with advanced cryptography can dramatically increase your protection against remote attacks like phishing and MITM (Man in the middle) attacks.įIDO2 and U2F (Universal 2 Factor) are two protocols that form the basis behind how your key authenticates with the web and other internet protocols.

They take the form of a small physical object, usually resembling a USB stick or dongle, and can be inserted in your computers USB port and tapped or pressed to authenticate to online services. A hardware security key is a great device for protecting your security online.

Debian 10 install ssh server