Skip to content

SSH Two-Factor Authentication

Some SSH servers ask for an additional verification code after the first authentication step. StormTunnel displays the server's interactive challenge when supported.

Respond to a Challenge

  1. Connect to the SSH tunnel.
  2. Read the prompt from the server.
  3. Enter the requested code or response and submit it before it expires.

StormTunnel does not generate the code. Use the method configured by your SSH administrator.

If the prompt does not work in the native SSH connection flow, edit the tunnel, expand Advanced Options, and turn on Force CLI Mode under SSH. This uses the system ssh command-line client for the connection. When it is off, StormTunnel switches to the command-line client automatically for servers that need two-factor authentication.

AWS IAM Identity Center sign-in is a separate flow. See AWS SSO authentication.

Security

Verification responses are for the current authentication attempt. Never send them, AWS credentials, or private keys to support.