How to setup passkey authentication in Linux?
7
votes
0
answers
7273
views
I have [setup](https://gist.github.com/pavinjosdev/0d7ade586e4b4a33d03a19c7684e78ce) the PAM module
pam_u2f.so
for FIDO2 as the primary authentication method on my LMDE 5 (based on Debian 11) machine.
Is there a way to integrate passkey support with this PAM module or with another?
Specifically I'm looking for the ability to use Google [passkeys](https://passkeys.dev/device-support/) in addition to my hardware security key (Yubikey).
There are several advantages to using a passkey from Google/Apple with the potential privacy downside:
1. The credentials are tied to the Google account and synced across all Google devices, so any device can be used as an authenticator
2. Not tied to a physical object that can be lost/stolen
3. Main point for lazy me: no need to remove a lost/stolen/damaged key from every website and device it's configured on
The Chrome browser on Linux sends a push notification via Bluetooth to a nearby Android smartphone for FIDO2/WebAuthn registration/authentication.
Can the pam_u2f.so
module (or another one) be configured to send a similar request and receive its response instead of relying on a locally connected USB security key?
Asked by Pavin Joseph
(276 rep)
Sep 10, 2023, 01:17 PM
Last activity: Jun 8, 2025, 09:47 AM
Last activity: Jun 8, 2025, 09:47 AM