From 49200cf2e80f7d23d2a2717130486316a9e12698 Mon Sep 17 00:00:00 2001 From: Christian Hesse Date: Wed, 4 May 2016 15:37:53 +0200 Subject: support reading second factor from terminal This increases security by not displaying on display and not writing to shell history. --- README-dracut.md | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'README-dracut.md') diff --git a/README-dracut.md b/README-dracut.md index d84f4b9..a410438 100644 --- a/README-dracut.md +++ b/README-dracut.md @@ -83,6 +83,10 @@ And updating key and second factor is straight forward: > ykfde -s old-2nd-factor -n new-2nd-factor +The second factor can be read from terminal, increasing security by not +displaying on display and not writing to shell history. Use capital +switches (`-S` and `-N`) for that. + Make sure to enable second factor in `/etc/ykfde.conf`. ### cpio archive with challenges -- cgit v1.2.3-54-g00ecf