Up Your SSH Security Game - Hardware-Based Authentication with FIDO2 Tokens

Learn how to enhance SSH security using FIDO2 hardware security tokens in this 15-minute conference talk from DevConf.CZ 2025. Discover how OpenSSH has supported FIDO2 security tokens for private-key based authentication since 2020, with compatibility across popular Git forges like GitHub and Codeberg. Explore the superior security properties of hardware-based keys compared to traditional private key files, including their inability to be copied and their capability to require PIN entry and physical touch for authentication. Understand how to configure Git to require these security steps only for push operations, maintaining ease of use for clone, fetch, and pull operations. Get a practical introduction to setting up this enhanced security system that many developers overlook despite its accessibility and straightforward implementation.