pam-u2f vs virtual-fido

pam-u2f

Pluggable Authentication Module (PAM) for U2F and FIDO2 (by Yubico)

Source Code

developers.yubico.com

Suggest alternative

Edit details

virtual-fido

A Virtual FIDO2 USB Device (by bulwarkid)

Suggest topics

Source Code

Suggest alternative

Edit details

InfluxDB - Power Real-Time Data Analytics at Scale

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

www.influxdata.com

featured

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com

featured

pam-u2f		virtual-fido
	Project
3	Mentions	15
518	Stars	1,135
1.0%	Growth	1.9%
4.8	Activity	6.2
9 days ago	Latest Commit	14 days ago
C	Language	C
BSD 2-clause "Simplified" License	License	MIT License

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

pam-u2f

Posts with mentions or reviews of pam-u2f. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2023-04-13.

I have seen in a lot of posts here people say not to use Google Authentication for 2FA. Can someone simply explain why, and what should I use instead?
2 projects | /r/Bitwarden | 13 Apr 2023
Is there a linux equivalent to Windows Hello?
3 projects | /r/linuxquestions | 2 Apr 2023
Any tool to check the security of my server?
6 projects | /r/selfhosted | 6 Jan 2023

virtual-fido

Posts with mentions or reviews of virtual-fido. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2023-06-07.

Tailscale doesn't want your password
3 projects | news.ycombinator.com | 7 Jun 2023
Passkeys now support external providers
2 projects | news.ycombinator.com | 6 Jun 2023

> who the heck would carry a USB key with them??
Why not? I do this. It's no different from any other physical key like a door key, and I keep it on the same keychain too...
> The passkey is usable anywhere (signed up on my desktop, hopped over to my laptop and signed in there with the same passkey).
I don't see how this conflicts with physical tokens like Yubikeys? The tokens help you "remember" the key like how a physical door key helps you "remember" the bitting (which is the real authentication info).
Just like passkeys, U2F can also be done using a virtual U2F device if you so choose (https://github.com/bulwarkid/virtual-fido). And presumably you could create an off-device portable token to store passkeys...
The real problem at the end of the day is just consistent adoption. There's still a ton of 2FA services that don't accept U2F and only use SMS or email codes...
Google Introduces Passkey Authentication
1 project | news.ycombinator.com | 4 May 2023

If this is FIDO2, then it seems these projects might be useful on Linux...
https://github.com/bulwarkid/virtual-fido
https://bulwark.id/
Is there a linux equivalent to Windows Hello?
3 projects | /r/linuxquestions | 2 Apr 2023

Suggested solution: https://github.com/bulwarkid/virtual-fido
On-device WebAuthn and what makes it hard to do well
7 projects | news.ycombinator.com | 11 Dec 2022
GitHub - bulwarkid/virtual-fido: A Virtual FIDO2 USB Device
1 project | /r/bag_o_news | 20 Nov 2022
Mozilla claims Apple, Google and Microsoft force users to use default browsers
4 projects | news.ycombinator.com | 23 Sep 2022

You can use an open source virtual FIDO device instead of Apple's implementation:
https://github.com/bulwarkid/virtual-fido/
Hacker News top posts: Sep 18, 2022
2 projects | /r/hackerdigest | 18 Sep 2022

Show HN: A virtual Yubikey device for 2FA/WebAuthN\ (104 comments)
Show HN: A virtual Yubikey device for 2FA/WebAuthN
1 project | /r/patient_hackernews | 17 Sep 2022

1 project | /r/hackernews | 17 Sep 2022

What are some alternatives?

When comparing pam-u2f and virtual-fido you can also consider the following projects:

hardening - Hardening Ubuntu. Systemd edition.

tpm-fido - A WebAuthn/U2F token protected by a TPM (Go/Linux)

http-observatory - Mozilla HTTP Observatory

PIVert

yubikey-full-disk-encryption - Use YubiKey to unlock a LUKS partition

j40 - J40: Independent, self-contained JPEG XL decoder

bastion - 🔒Secure Bastion implemented as Docker Container running Alpine Linux with Google Authenticator & DUO MFA support

SoftU2F - Software U2F authenticator for macOS

lynis - Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

SoftU2F-Win - Software U2F authenticator for Windows

pam-onelogin - pam-onelogin is a pretty complete pam/nss stack for using OneLogin as authentication source (with MFA) and user/group lookups. Primarily used for SSH.

trabucco - Can launch your 90kg applications for 300m (It's a launcher, like katapult, but better).