Infrastructure applications support independent multi-factor authentication (MFA) with FIDO2 keys. You can allow ssh_fido2_key , piv_key , or both in application-level and policy-level MFA settings. Users enroll FIDO2 keys through the App Launcher and connect with the generated SSH identity.
Cloudflare One, Access - Independent MFA supports FIDO2 for infrastructure applications
calendar_today
August 12, 2026
domain
cloudflare