Optimised authentication methods for Ubuntu Desktop

Securing enterprise desktops with modern authentication options

Passwords have been around as long as multi-user operating systems and still serve as the default local authentication method – but they are far from the only option. Today, desktop users have access to a number of friendlier and more effective authentication methods that can complement, or even replace, traditional passwords.

This whitepaper describes how to implement and configure these modern authentication options on Ubuntu Desktop 18.04 LTS, and offers guidance on combining authenticators to enhance security and improve the overall login experience. These principles are well suited to both personal desktop use and enterprise desktop environments.

This whitepaper includes:

  • Technical walkthroughs for implementing YubiKey, Google Authenticator, and Duo on Ubuntu Desktop 18.04 LTS
  • Best practice advice for improving password authentication, remote access, and desktop login without passwords
  • For enterprise users, a review of authentication recommendations covered in the National Institute of Standards and Technology’s Digital Identity Guidelines (NIST 800-63B)
  • In submitting this form, I confirm that I have read and agree to Canonical's Privacy Notice and Privacy Policy.