libpam-google-authenticator

This package is the Google Authenticator libpam module that allows you to require a TOTP or HOTP one-time passwords as a form of second factor authentication. This package is built for amd64 and armhf.

My use case for this is for allowing password login only in combination with a TOTP code, in addition to the regular key-based login. To do this, install the package then edit /etc/pam.d/sshd and add

auth   required  pam_google_authenticator.so

under ‘@include common-account’ (~L20), then run

google-authenticator

to generate secret keys. The source that this is built from is available in my git repo