517b015996
Two-line file format (expires_unix\nargon2id-PHC) keeps the C PAM module parser trivial — no json-c link needed. Atomic temp+rename means a concurrent reader never sees a half-written file. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
authforge
Turnkey U2F / FIDO2 passkey / TOTP MFA for Linux desktops. v1 ships on Ubuntu LTS + GNOME; Debian and KDE Plasma are on the roadmap.
Install (end users)
sudo add-apt-repository ppa:dangerousthings/authforge
sudo apt install authforge
Build from source
See docs/BUILDING.md.
Status
Pre-alpha. Phases 0–7, 15, 16 code complete (workspace scaffold, D-Bus daemon,
storage layer, FIDO2 backend, policy apply via pam-auth-update with lockout
simulation, PAM pending-flag backstop, authforgectl CLI, gnome-control-center
overlay, Ansible role for fleet deployment). Phase 8 (GUI Security Keys tab) and
Phase 12 (recovery flow) are the next single-lane bundles. See docs/plans/
for design, roadmap, and per-phase implementation plans.
Copyright 2026 Dangerous Things, LLC. Licensed under the Apache License, Version 2.0.