install

Additional install commands

macOS

Homebrewverified · 100%

brew install libfido2

provider-native install command

overview

Package summary

Provides library functionality for FIDO U2F & FIDO 2.0, including USB

Project links

Commands and aliases

fido2-assert
fido2-cred
fido2-token

history

Project history and usage

libfido2 is Yubico's BSD-licensed C library and command-line tool set for communicating with FIDO devices over USB or NFC and verifying attestation and assertion signatures. It supports FIDO U2F as CTAP1 and FIDO2 as CTAP2.

Project history

Yubico's NEWS file lists libfido2 0.1.0 on May 18, 2018 as the first beta release. The project reached 1.0.0 on March 21, 2019 with native HID support on Linux, macOS, and Windows, command options for U2F on dual authenticators, resident-key handling, CTAP2 CBOR checks, fuzzing harnesses, and documentation fixes.

Later releases followed the FIDO standards curve: hmac-secret support in 2018, credential management and richer option APIs in 2019, U2F fallback and credProtect in 2020, NFC support on Linux and FIDO 2.1 work in 2021, and CTAP 2.3 support in 2026.

Adoption history

The README documents package installs for Fedora, Ubuntu, Homebrew on macOS, and Windows release artifacts. Its command-line tools, fido2-cred, fido2-assert, and fido2-token, made low-level authenticator operations packageable outside browser stacks.

How it is used

Developers link libfido2 when they need direct authenticator communication, attestation verification, assertion verification, or tooling around security keys. System users also install fido2-tools to inspect tokens and exercise credentials from the shell.

Why package nerds care

libfido2 is package-nerd significant because it brings passkey/security-key plumbing into the Unix packaging world as a normal C library, CLI suite, udev-rule companion, and dependency for higher-level authentication integrations.

Timeline

2018-05-18: Yubico NEWS lists libfido2 0.1.0 as the first beta release.
2019-03-21: Yubico NEWS lists libfido2 1.0.0 with native HID support on Linux, macOS, and Windows.
2020-04-15: Version 1.4.0 added U2F fallback and FIDO2 credential-protection support.
2021-10-27: Version 1.9.0 enabled NFC support on Linux and added OpenSSL 3.0 compatibility.
2026-04-15: Version 1.17.0 added CTAP 2.3 support.

Related projects

Related projects and standards include YubiKeys, FIDO U2F, CTAP1, CTAP2, WebAuthn, libcbor, OpenSSL, zlib, systemd-udev, and language bindings such as Fido2Net, go-libfido2, p5-FIDO-Raw, and Rust libfido2 bindings.

Sources

security posture

Risk level: green

library-like package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

library-like package without higher-risk signals

Signals

metadata:library-like

Install behavior

No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

Command	Kind	Exposure	Note
`fido2-assert`	executable	indexed executable	Discovered from the local executable index.
`fido2-cred`	executable	indexed executable	Discovered from the local executable index.
`fido2-token`	executable	indexed executable	Discovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03

manager version1.17.0

manager updated

local dataunknown

upstreamnot available

latest detectednot detected

okNo freshness warnings were generated.

install metadata

Package metadata

Package key	brew:libfido2
Version	1.17.0
Package manager	Homebrew
Homepage	https://developers.yubico.com/libfido2/
Repository	https://github.com/Yubico/libfido2
Bottle	not recorded
Service	none declared

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Combined YAML source

View the package source record on GitHub.

combined/libfido2.yml

Used sources

Geiger risk classifier
Nucleus package database
curated package history
pkgdb category and tag curation

Install libfido2 with Homebrew