Enable Two-Factor Authentication on your Ubuntu SSO account

This is fairly simple:

1. Request membership to the launchpad.net/~sso-2f-testers Launchpad group.

2. Log in to https://login.ubuntu.com/ with your standard SSO account credentials.

3. Click the "Authentication Devices" tab.
4. Click "Add a new authentication device".
5. Select a device type.
6. Follow the instructions on screen.
7. Select "Always" for "Require an authentication device", and click "Update".

After adding your primary device, you must generate and keep handy a set of paper codes in addition to your primary device. Paper codes are easy to add, you can print them and have them stored somewhere secure (but handy) in case your main device gets lost, needs to be replaced, reflashed, etc.

Devices

Ubuntu SSO supports any device or application that implements the OATH protocol (both counter- and time-based implementations work).

These types of devices are supported right now:

• Smartphones: Ubuntu Phone, Android, iOS, Blackberry and any other brand/OS for which an OATH-compatible application is available.
• Yubikey USB devices in OATH mode.
• Feitian OTP c100 keyfobs.
• Paper.
• oathtool.
• Some password managers (like 1Password).
• Any other OATH/TOTP/HOTP-compatible device.

I have questions

We have an extensive list of FAQs with answers and technical information.