# authforge

Turnkey U2F / FIDO2 passkey / TOTP MFA for Linux desktops. v1 ships on Ubuntu LTS + GNOME; Debian and KDE Plasma are on the roadmap.

## Install (end users)

    sudo add-apt-repository ppa:dangerousthings/authforge
    sudo apt install authforge

## Build from source

See [docs/BUILDING.md](docs/BUILDING.md).

## Status

Pre-alpha. Phases 0–12, 15, 16 code complete (workspace scaffold, D-Bus
daemon, storage layer, FIDO2 backend, policy apply via pam-auth-update
with lockout simulation, PAM pending-flag backstop with Argon2id recovery
codes, `authforgectl` CLI, GUI shell with Security Keys / Policy /
Recovery / TOTP tabs, fullscreen first-run enrollment modal,
`pam_google_authenticator`-delegated TOTP, `gnome-control-center`
overlay, Ansible role for fleet deployment). Remaining work for v1.0:
Debian packaging finalization (Phase 13), Launchpad PPA + VM smoke
(Phase 14), integration test harness (Phase 17), user docs (Phase 18).
See [docs/plans/](docs/plans/) for design, roadmap, and per-phase
implementation plans.

Copyright 2026 Dangerous Things, LLC. Licensed under the Apache License, Version 2.0.