Sample Header Ad - 728x90

How to setup passkey authentication in Linux?

7 votes
0 answers
7273 views
I have [setup](https://gist.github.com/pavinjosdev/0d7ade586e4b4a33d03a19c7684e78ce) the PAM module pam_u2f.so for FIDO2 as the primary authentication method on my LMDE 5 (based on Debian 11) machine. Is there a way to integrate passkey support with this PAM module or with another? Specifically I'm looking for the ability to use Google [passkeys](https://passkeys.dev/device-support/) in addition to my hardware security key (Yubikey). There are several advantages to using a passkey from Google/Apple with the potential privacy downside: 1. The credentials are tied to the Google account and synced across all Google devices, so any device can be used as an authenticator 2. Not tied to a physical object that can be lost/stolen 3. Main point for lazy me: no need to remove a lost/stolen/damaged key from every website and device it's configured on The Chrome browser on Linux sends a push notification via Bluetooth to a nearby Android smartphone for FIDO2/WebAuthn registration/authentication. Can the pam_u2f.so module (or another one) be configured to send a similar request and receive its response instead of relying on a locally connected USB security key?
Asked by Pavin Joseph (276 rep)
Sep 10, 2023, 01:17 PM
Last activity: Jun 8, 2025, 09:47 AM