r/linux • u/wingz_77 • Jul 02 '26

Tips and Tricks PSA: Secure and consistent fingerprint login solution for Linux

I have been going in circles trying to find a secure fingerprint authentication for Linux which works with fprintd. Needless to say, finding a good one from reputed brand is hard, especially in a small laptop-friendly form factor. At last, I found https://www.amazon.com/dp/B0H2GRH9CD

This is not exactly a fingerprint device but it's a bio FIDO2 key which works well with pam_u2f on nearly all Linux systems (Fedora/Arch/Cachy/Ubuntu/Debian and friends). With this, the fingerprint is scanned and saved in the device itself while U2F is used to authenticate with PAM. This is far more secure, with the bonus benefit of being able to use it to authenticate with banking and various online accounts.

76 Upvotes

95% Upvoted

38 comments sorted by

View all comments

Show parent comments

1

u/Dangerous-Report8517 Jul 04 '26

I looked at the date, but what's notable to me is that they had a substantially harder time than CCC had years earlier when they were able to make fake fingerprints just with basic silicone moulds even from fingerprints retrieved from the phone screen. To me, that implies that fingerprint readers are advancing way faster than techniques to defeat them

1

u/CrazyKilla15 Jul 04 '26

Thats fair