Admin consoles: the soft underbelly of billion dollar software operations since... Seriously, though: you almost certainly have one if you run a software business. Client side SSH certificates are your friend. If you're not able to do that, because it is really annoying, separate it from the main app and lock it down as much as possible. (Separate authentication from the main site/app's authentication scheme. Lock do…
Take a look at Authy for a reasonably easy way to add two-factor auth to your normal SSH login. It's intended for website authentication, but there is a Github project for adding it to sshd. https://www.authy.com/ https://github.com/authy/authy-ssh
[1]: http://www.howtogeek.com/121650/how-to-secure-ssh-with-googl...