pkg.soopen package index

brew / rank 6594

Install pam-u2f with Homebrew, apk, dnf, MacPorts, pacman, apt, Nix, zypper

Provides an easy way to use U2F-compliant authenticators with PAM. Version 1.4.0 via Homebrew; verified 2026-09-11. Also installable with debian: sudo apt install libpam-u2f.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install pam-u2f

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install pam-u2f

MacPorts ports tree · security/pam-u2f/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add pam-u2f

Alpine Linux edge package indexes · pam-u2f · source: dl-cdn.alpinelinux.org

Fedora dnfverified · 92%
sudo dnf install pam-u2f

Fedora Rawhide package metadata · pam-u2f · source: dl.fedoraproject.org

Arch Linux pacmanverified · 92%
sudo pacman -S pam-u2f

Arch Linux sync databases · pam-u2f · source: geo.mirror.pkgbuild.com

Debian aptverified · 92%
sudo apt install libpam-u2f

Debian stable package indexes · libpam-u2f · source: deb.debian.org

Nixverified · 92%
nix profile install nixpkgs#pam_u2f

nixpkgs package indexes · pkgs/by-name/pa/pam_u2f/package.nix · source: api.github.com

openSUSE zypperverified · 92%
sudo zypper install pam_u2f

openSUSE Tumbleweed package metadata · pam_u2f · source: download.opensuse.org

overview

Package summary

Provides an easy way to use U2F-compliant authenticators with PAM

Commands and aliases

  • pamu2fcfg

history

Project history and usage

pam-u2f is Yubico's PAM module for authenticating Unix users with YubiKeys and other U2F- or FIDO2-compliant authenticators.

Project history

Yubico released the initial pam-u2f version in December 2014. Version 1.0.0 followed in June 2015 with XDG-based per-user mappings plus manual and interactive modes.

Version 1.1.0 migrated the implementation from the older U2F libraries to libfido2 in September 2020, adding FIDO2 capabilities including user verification, PIN verification, resident credentials, and SSH credential format.

Version 1.4.0 in March 2025 introduced the default /etc/security/pam_u2f.conf module configuration file and began a build-system transition from Autotools to CMake.

Adoption history

Yubico documents packages for Ubuntu, Fedora, and macOS/Homebrew, while the input metadata additionally records packages for Alpine, Debian, MacPorts, Nix, Arch, Ubuntu, and openSUSE.

The module originally targeted U2F authenticators and broadened into FIDO2, PIN, user-verification, resident-credential, and OpenSSH security-key workflows.

How it is used

Administrators add pam_u2f.so to the relevant files under /etc/pam.d, typically as a required second factor after primary authentication or as a sufficient module for passwordless PIN or biometric authentication.

Users enroll a connected authenticator with pamu2fcfg and store its mapping in the per-user XDG location, while administrators can instead maintain a central mapping such as /etc/u2f_mappings.

Why package nerds care

pam-u2f connects hardware-backed FIDO authentication to the traditional Unix PAM stack. It is attractive to system integrators because it supports both per-user and centrally administered mappings and can provide either a second factor or passwordless authentication.

Its authentication-critical placement makes packaging and upgrades unusually sensitive: incorrect PAM configuration can cause lockouts, and its release history includes security hardening and fixes for authentication bypass or unsafe debug handling.

Timeline

  • 2014-12-16: Initial release.
  • 2015-06-17: Version 1.0.0 added XDG-based mappings and manual and interactive modes.
  • 2020-09-17: Version 1.1.0 migrated to libfido2 and added major FIDO2 features.
  • 2021-05-19: Version 1.1.1 fixed a PIN-authentication bypass.
  • 2023-03-14: Version 1.3.0 added username expansion in authorization-file paths.
  • 2025-03-25: Version 1.4.0 added module configuration-file support and CMake builds.

Related projects

  • libfido2 supplies current FIDO device support. pamu2fcfg enrolls authenticators and emits authorization mappings. OpenSSH security-key credentials can be consumed with sshformat. YubiKey Touch Detector is related to user-presence notifications.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 8 platform targets.
  • Installs with 2 runtime dependencies.
  • Build metadata lists 5 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
/etc/pam.d/*path supplied with pam_u2f.so conf=path/to/pam_u2f.conf

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
$XDG_CONFIG_HOME/Yubico/u2f_keys~/.config/Yubico/u2f_keys/etc/u2f_mappings

executables

Installed executables

CommandKindExposureNote
pamu2fcfgcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-09-19
manager version1.4.0
manager updated2026-09-11
local dataok
upstreamnot checked
latest detectednot detected

https://developers.yubico.com/pam-u2f/

install metadata

Package metadata

Package keybrew:pam-u2f
Version1.4.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/pam-u2f
Homepagehttps://developers.yubico.com/pam-u2f/
Repositoryhttps://github.com/Yubico/pam-u2f
Upstream docshttps://developers.yubico.com/pam-u2f/
LicenseBSD-2-Clause
Source archivehttps://developers.yubico.com/pam-u2f/Releases/pam_u2f-1.4.0.tar.gz
Last updated2026-09-11T18:19:01Z
Pulseupdated
Dependencieslibfido2, openssl@3
Build dependenciesasciidoc, autoconf, automake, libtool, pkgconf
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared
CaveatsTo use a U2F key for PAM authentication, specify the full path to the module ($HOMEBREW_PREFIX/opt/pam-u2f/lib/pam/pam_u2f.so) in a PAM configuration. You can find all PAM configurations in /etc/pam.d. For further installation instructions, please visit https://developers.yubico.com/pam-u2f/#installation.

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namepam-u2f
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

libpam-u2f 1.4.0-1

universal 2nd factor (U2F) PAM module

https://developers.yubico.com/pam-u2f/

sudo apt install libpam-u2f
  • Section: admin
  • Architecture: amd64
  • Source Package: pam-u2f
  • 4 dependencies
  • 1 optional deps
  • normalized package name match
  • Matched by: Pam U2f
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libpam-u2f from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

pamu2fcfg 1.4.0-1

universal 2nd factor (U2F) PAM module command-line helper tool

https://developers.yubico.com/pam-u2f/

sudo apt install pamu2fcfg
  • Section: admin
  • Architecture: amd64
  • Source Package: pam-u2f
  • 4 dependencies
  • normalized package name match
  • Matched by: Pam U2f
Debian stable package indexes · deb.debian.org · Debian stable package indexes: pamu2fcfg from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

pam_u2f

nix profile install nixpkgs#pam_u2f
  • normalized package name match
  • Matched by: Pam U2f
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/pa/pam_u2f/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

libpam-u2f 1.1.0-1.1build3

universal 2nd factor (U2F) PAM module

https://developers.yubico.com/pam-u2f/

sudo apt install libpam-u2f
  • Section: universe/admin
  • Architecture: amd64
  • Source Package: pam-u2f
  • 4 dependencies
  • 1 optional deps
  • normalized package name match
  • Matched by: Pam U2f
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libpam-u2f from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

pamu2fcfg 1.1.0-1.1build3

universal 2nd factor (U2F) PAM module command-line helper tool

https://developers.yubico.com/pam-u2f/

sudo apt install pamu2fcfg
  • Section: universe/admin
  • Architecture: amd64
  • Source Package: pam-u2f
  • 3 dependencies
  • normalized package name match
  • Matched by: Pam U2f
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: pamu2fcfg from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

pam-u2f 1.4.0-r0

Pluggable Authentication Module (PAM) for U2F

https://developers.yubico.com/pam-u2f/

sudo apk add pam-u2f
  • License: BSD-2-Clause
  • Architecture: x86_64
  • Source Package: pam-u2f
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Pam U2f
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: pam-u2f from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

pam-u2f-doc 1.4.0-r0

Pluggable Authentication Module (PAM) for U2F (documentation)

https://developers.yubico.com/pam-u2f/

sudo apk add pam-u2f-doc
  • License: BSD-2-Clause
  • Architecture: x86_64
  • Source Package: pam-u2f
  • normalized package name match
  • Matched by: Pam U2f
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: pam-u2f-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

pam-u2f 1.4.0-7.fc45

Implements PAM authentication over U2F

https://github.com/Yubico/pam-u2f

sudo dnf install pam-u2f
  • License: BSD-2-Clause
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: pam-u2f
  • 5 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Pam U2f
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: pam-u2f from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/652278618dec9c023176a80c435a32a2c8154869fb0eb662c267a54df28d77d9-primary.xml.zst
dnf95%

pamu2fcfg 1.4.0-7.fc45

Configures PAM authentication over U2F

https://github.com/Yubico/pam-u2f

sudo dnf install pamu2fcfg
  • License: BSD-2-Clause
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: pam-u2f
  • 5 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Pam U2f
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: pamu2fcfg from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/652278618dec9c023176a80c435a32a2c8154869fb0eb662c267a54df28d77d9-primary.xml.zst
pacman95%

pam-u2f 1.4.0-2

Universal 2nd Factor (U2F) PAM authentication module from Yubico

https://developers.yubico.com/pam-u2f

sudo pacman -S pam-u2f
  • License: BSD-2-Clause
  • Architecture: x86_64
  • 3 dependencies
  • normalized package name match
  • Matched by: Pam U2f
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: pam-u2f from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

pam_u2f 1.4.0-1.5

U2F authentication integration into PAM

https://developers.yubico.com

sudo zypper install pam_u2f
  • License: BSD-2-Clause
  • Category: Productivity/Networking/Security
  • Architecture: x86_64
  • Source Package: pam_u2f
  • 4 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Pam U2f
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: pam_u2f from https://download.opensuse.org/tumbleweed/repo/oss/repodata/d310d5a96106e1e8872a385adf98aaa23be9db5d80937a6717314e7e7f37715065c6c748ab7ccee6475d620b46979c0fe64235fc0c46988e17edf659578fcf31-primary.xml.zst
MacPorts95%

pam-u2f

sudo port install pam-u2f
  • normalized package name match
  • Matched by: Pam U2f
MacPorts ports tree · api.github.com · MacPorts ports tree: security/pam-u2f/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • openssl@3Runtime dependency declared by Homebrew.
  • libfido2Runtime dependency declared by Homebrew.
  • pkgconfBuild dependency declared by Homebrew.
  • libtoolBuild dependency declared by Homebrew.
  • autoconfBuild dependency declared by Homebrew.
  • automakeBuild dependency declared by Homebrew.

Same workflow

  • linux-pamShares pkgdb curated category or tags: authentication, cli, pam, security.
  • oath-toolkitShares pkgdb curated category or tags: authentication, cli, pam, security.
  • libu2f-serverShares pkgdb curated category or tags: authentication, cli, security, u2f.
  • krb5Shares pkgdb curated category or tags: authentication, cli, security.
  • cyrus-saslShares pkgdb curated category or tags: authentication, cli, security.
  • libjwtShares pkgdb curated category or tags: authentication, cli, security.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • pkg.so package database
  • pkgdb category and tag curation