# Security

**URL:** https://discuss.pomerium.com/c/security/11.md

[Latest](https://discuss.pomerium.com/latest.md) · [Categories](https://discuss.pomerium.com/categories.md) · [Tags](https://discuss.pomerium.com/tags.md)

---

## [Support to MFA and Yubikey](https://discuss.pomerium.com/t/support-to-mfa-and-yubikey/475)

<div class="topic-metadata">

**Author:** [@mha](https://discuss.pomerium.com/u/mha)\
**Replies:** 1\
**Last updated:** [May 27, 2025, 6:09pm UTC](https://discuss.pomerium.com/t/support-to-mfa-and-yubikey/475 "2025-05-27T18:09:44Z")

</div>

Does Pomerium support MFA and Yubikey? If so, how do you enable it?

---

## [Security concerns on jwt assertion and passing access token to upstream application](https://discuss.pomerium.com/t/security-concerns-on-jwt-assertion-and-passing-access-token-to-upstream-application/313)

<div class="topic-metadata">

**Author:** [@Dennis](https://discuss.pomerium.com/u/Dennis)\
**Replies:** 1\
**Last updated:** [October 1, 2023, 2:26pm UTC](https://discuss.pomerium.com/t/security-concerns-on-jwt-assertion-and-passing-access-token-to-upstream-application/313 "2023-10-01T14:26:03Z")

</div>

Hi guys , I have read most of the documentations regarding the JWT Token Assertion, but i want to make sure some things like this token being an ‘opaque’ token, can anyone explain it in a more simpler way ? Do we need to…

---

## [\[security\] Pomerium v0.22.2, v0.21.4, v0.20.1, v0.19.2, v0.18.1, and v0.17.4 release](https://discuss.pomerium.com/t/security-pomerium-v0-22-2-v0-21-4-v0-20-1-v0-19-2-v0-18-1-and-v0-17-4-release/264)

<div class="topic-metadata">

**Author:** [@bobby](https://discuss.pomerium.com/u/bobby)\
**Replies:** 1\
**Last updated:** [May 26, 2023, 10:54pm UTC](https://discuss.pomerium.com/t/security-pomerium-v0-22-2-v0-21-4-v0-20-1-v0-19-2-v0-18-1-and-v0-17-4-release/264 "2023-05-26T22:54:40Z")

</div>

As mentioned in our pre-announcement yesterday, we have released Pomerium v0.22.2, v0.21.4, v0.20.1, v0.19.2, v0.18.1, and v0.17.4. We recommend all users immediately upgrade. These patch releases include a CRITICAL sec…

---

## [\[security\] Pomerium v0.22.2, v0.21.4, v0.20.1, v0.19.2, v0.18.1, and v0.17.4 pre-announcement](https://discuss.pomerium.com/t/security-pomerium-v0-22-2-v0-21-4-v0-20-1-v0-19-2-v0-18-1-and-v0-17-4-pre-announcement/262)

<div class="topic-metadata">

**Author:** [@bobby](https://discuss.pomerium.com/u/bobby)\
**Replies:** 0\
**Last updated:** [May 25, 2023, 11:45pm UTC](https://discuss.pomerium.com/t/security-pomerium-v0-22-2-v0-21-4-v0-20-1-v0-19-2-v0-18-1-and-v0-17-4-pre-announcement/262 "2023-05-25T23:45:57Z")

</div>

Hello Pomerium users, We plan to release Pomerium v0.22.2, v0.21.4, v0.20.1, v0.19.2, v0.18.1, and v0.17.4 during US business hours on Friday, May 26th. These patch releases include a critical security fix to Pomerium …