Canonical adds FIDO2 hardware key support to Launchpad

Developers who use Launchpad can now use a USB FIDO2 security key to restrict API access, which makes any stolen login details useless without it. Launchpad is, as I’m sure you know, where Canonical builds Ubuntu’s package, hosts code, PPAs and many other things that end up on a users’ system. Developer tools, like lp-shell and ubuntu-archive-tools, log in with a saved token, normally kept as a text file or in the desktop keyring on the developer’s machine. Anyone who gets hold of it, malware included, could act as them, with the permissions it carries. Canonical’s Jürgen Gmach says “for most

• #security