authforge
Turnkey U2F / FIDO2 passkey / TOTP MFA for Linux desktops. v1 ships on Ubuntu LTS + GNOME; Debian and KDE Plasma are on the roadmap.
Install (end users)
sudo add-apt-repository ppa:dangerousthings/authforge
sudo apt install authforge
Build from source
See docs/BUILDING.md.
Status
Pre-alpha. Phases 0–12, 15, 16 code complete (workspace scaffold, D-Bus
daemon, storage layer, FIDO2 backend, policy apply via pam-auth-update
with lockout simulation, PAM pending-flag backstop with Argon2id recovery
codes, authforgectl CLI, GUI shell with Security Keys / Policy /
Recovery / TOTP tabs, fullscreen first-run enrollment modal,
pam_google_authenticator-delegated TOTP, gnome-control-center
overlay, Ansible role for fleet deployment). Remaining work for v1.0:
Debian packaging finalization (Phase 13), Launchpad PPA + VM smoke
(Phase 14), integration test harness (Phase 17), user docs (Phase 18).
See docs/plans/ for design, roadmap, and per-phase
implementation plans.
Copyright 2026 Dangerous Things, LLC. Licensed under the Apache License, Version 2.0.