# MultiFactor Authentication with hardware token **URL:** \ **Category:** Getting advice\ **Created:** [April 6, 2020, 3:03pm UTC](https://forum.keycloak.org/t/multifactor-authentication-with-hardware-token/2000 "2020-04-06T15:03:27Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![rbattenfeld](https://avatars.discourse-cdn.com/v4/letter/r/8edcca/32.png) [@rbattenfeld](https://forum.keycloak.org/u/rbattenfeld)\ **Post date:** [April 6, 2020, 3:03pm UTC](https://forum.keycloak.org/t/multifactor-authentication-with-hardware-token/2000/1 "2020-04-06T15:03:27Z")
Hi, I am looking for enabling a 2Factor authentication using a hardware token policy. I already did some first setup with keycloak and a springboot as oauth2 client. Before asking how to integrate a external service that sends a new token on the device, I looking how to enable that a user always as to login with a 2Factor authentikcation. I see OTP but I could find how to configure a permanent 2Factor authentication. Then, I am looking for enabling keycloak to trigger such a hardware token. It would be great to get some hints where I can look for enabling keycloak in this way. Thanks, Ralf ---
**Author:** ![Robinyo](https://avatars.discourse-cdn.com/v4/letter/r/dec6dc/32.png) [@Robinyo](https://forum.keycloak.org/u/Robinyo)\ **Post date:** [April 6, 2020, 9:01pm UTC](https://forum.keycloak.org/t/multifactor-authentication-with-hardware-token/2000/2 "2020-04-06T21:01:17Z")
@rbattenfeld I Googled “keycloak 2fa” See: - [Keycloak Multi-Factor Authentication With Hardware Tokens](https://www.protectimus.com/blog/keycloak-multi-factor-authentication-hardware-tokens/) - [Keycloak Two-Factor Authentication](https://ultimatesecurity.pro/post/2fa/) - [W3C Web Authentication - Two-Factor](https://github.com/keycloak/keycloak-community/blob/master/design/web-authn-two-factor.md) - [Keycloak Conditional OTP Step-by-Step](https://gist.github.com/thomasdarimont/ad3aa0e36d33d067dba2)