Relying strictly on SSH keys leaves servers exposed if developer laptops or credentials are compromised. This guide explains how to integrate Google Authenticator PAM with OpenSSH to require both a private key and a dynamic TOTP code on Linux.