Skip to content

Two-Factor Authentication

Enter verification codes when SSH servers require additional authentication.

How It Works

When connecting to a server that requires two-factor authentication:

  1. StormTunnel establishes the initial connection
  2. Server requests a verification code
  3. A secure input dialog appears
  4. Enter your code and click Submit
  5. Connection completes if the code is valid

Entering Codes

When prompted:

  1. Check your authenticator app or wait for SMS/email
  2. Enter the code in the secure input field
  3. Click Submit or press Enter

To cancel, click Cancel or press Esc.

Code Expiration

Most codes expire in 30 seconds. Enter promptly for best results.

Supported Methods

Method Description
TOTP Time-based codes from authenticator apps (Google Authenticator, Authy, 1Password)
SMS Codes sent via text message
Email Codes sent to your email
Hardware tokens YubiKey and similar devices

StormTunnel displays whatever prompt your server sends, so custom 2FA methods are also supported.

Security

  • Masked input - Code characters are hidden during entry
  • No storage - Codes are never saved to disk
  • Session-specific - Each code applies only to the current connection

Troubleshooting

Invalid Code

  1. Check you're using the current code (not an old one)
  2. Verify your device clock is synchronized
  3. Try the next code if using TOTP

Code Expired

  1. Wait for a fresh code
  2. Enter it immediately when the prompt appears

Connection Lost During 2FA

  1. Reconnect to the tunnel
  2. Complete 2FA when prompted again

Server Not Accepting Code

  1. Verify the correct 2FA method for this server
  2. Check if backup codes are available
  3. Contact your server administrator