Using Authenticator app for public facing SSH server

Hi,

I have a GCP instance that is purely used for VPN, SOCKS Proxy or Iodine (depending on what’s needed)

Currently I am using Public Key Authentication however I came across a situation where I was in a hotel & without my laptop and needed to use the internet (the device was a Mac)

This got me thinking that if I connect to my SSH server I can easily use a SOCKS proxy to protect the browsing session however I would not be comfortable typing a password that could potentially be logged & then reused.

Has anyone been able to use the Authenticator app to generate passwords & automatically assign it to the SSH user?

I know another alternative could be to use 2FA