awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
google avatar

google/google-authenticator-libpam

0
View on GitHub↗

Google Authenticator Libpam

This project is a Pluggable Authentication Module for Linux systems that enforces multi-factor identity verification. It integrates directly into the system authentication stack to require time-based one-time passwords alongside standard user credentials, providing a mechanism to secure local and remote shell access.

The module distinguishes itself through its implementation of the time-based one-time password algorithm, which includes built-in support for clock-skew compensation to account for time discrepancies between servers and user devices. It manages individual user secret keys through a local file-based persistence mechanism and supports modular stacking, allowing administrators to pass credentials between multiple authentication modules within a single login flow.

Beyond core verification, the tool provides configurable policy settings that allow administrators to define grace periods and manage secret file locations. It facilitates the synchronization of unique authentication secrets with mobile applications, ensuring that multi-factor enforcement remains functional while maintaining system-level security standards.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Features

  • PAM Modules - Integrates custom authentication logic directly into the system login stack via the standard pluggable module interface.
  • TOTP Authentication Systems - Provides a provider for generating and validating time-based one-time passwords to secure system access.
  • Pluggable Authentication Backends - Implements a modular authentication framework that integrates custom security logic into the standard system login pipeline.
  • Credential Verification - Enforces a blocking authentication flow that requires successful validation of both primary credentials and secondary tokens.
  • One-Time Passwords - Generates time-based one-time passwords using a shared secret and the current system time for secure identity verification.
  • Two-Factor Authentication - Enforces two-factor authentication by requiring time-based one-time passwords alongside standard user credentials.
  • Clock-Abstracted Time Validation - Provides mechanisms to compensate for clock drift between servers and authentication devices to ensure token validity.
  • Clock Skew Tolerances - Provides configurable time-based grace periods to compensate for clock drift during authentication validation.
  • User Secret Management - Enables the generation of unique user authentication secrets and provides mechanisms to sync them with mobile authenticator applications.
  • Local Secret Storage - Maintains individual user authentication secrets in local files to enable secure verification during login.
  • Linux Security Hardening - Provides a security module that integrates with system authentication stacks to mandate multi-factor verification for local and remote logins.
  • Server Hardening - Hardens server access by mandating multi-factor verification for all shell login attempts.
1,988 stars·303 forks·C·Apache-2.0·22 views

Star history

Star history chart for google/google-authenticator-libpamStar history chart for google/google-authenticator-libpam

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

Frequently asked questions

What does google/google-authenticator-libpam do?

This project is a Pluggable Authentication Module for Linux systems that enforces multi-factor identity verification. It integrates directly into the system authentication stack to require time-based one-time passwords alongside standard user credentials, providing a mechanism to secure local and remote shell access.

What are the main features of google/google-authenticator-libpam?

The main features of google/google-authenticator-libpam are: PAM Modules, TOTP Authentication Systems, Pluggable Authentication Backends, Credential Verification, One-Time Passwords, Two-Factor Authentication, Clock-Abstracted Time Validation, Clock Skew Tolerances.

Which projects share features with google/google-authenticator-libpam?

Projects with overlapping indexed features include: bitwarden/android — This project is an Android password manager application that provides an end-to-end encrypted vault for storing and… google/google-authenticator — This is a two-factor authentication library and open-source multi-factor authentication implementation. It provides a… kylemanna/docker-openvpn — This project provides a complete OpenVPN server deployment packaged as a Docker container, with an integrated EasyRSA… bubka/2fauth — 2FAuth is a self-hosted two-factor authentication server and credential vault. It functions as a web-based… jamie-mh/authenticatorpro — AuthenticatorPro is an open-source security application for Android designed to manage two-factor authentication. It… jessecar96/steamdesktopauthenticator — SteamDesktopAuthenticator is a desktop multi-factor authentication client for Steam accounts. It serves as a desktop…

Projects sharing features with Google Authenticator Libpam

These projects share indexed features with Google Authenticator Libpam. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • google/google-authenticatorgoogle avatar

    google/google-authenticator

    5,349View on GitHub↗

    This is a two-factor authentication library and open-source multi-factor authentication implementation. It provides a suite of tools for implementing security workflows that require a second layer of verification beyond standard credentials. The project implements both time-based one-time passwords and HMAC-based one-time passwords. It includes utilities for generating these codes based on shared secrets and counters, following industry standards such as RFC 6238. The library covers cryptographic primitives including Base32 secret key encoding, dynamic truncation extraction, and symmetric ke

    Java
    View on GitHub↗5,349
  • bitwarden/androidbitwarden avatar

    bitwarden/android

    8,457View on GitHub↗

    This project is an Android password manager application that provides an end-to-end encrypted vault for storing and synchronizing login credentials, secure notes, and identities. It functions as a secure storage system using zero-knowledge encryption to ensure that only the user can decrypt their stored data. The application integrates directly with the Android system to provide an autofill service that populates usernames and passwords into mobile apps and browser login fields. It also serves as a passkey management wallet for FIDO2 cryptographic passkeys and a time-based one-time password a

    Kotlinandroidbitwardencompose
    View on GitHub↗8,457
  • kylemanna/docker-openvpnkylemanna avatar

    kylemanna/docker-openvpn

    9,089View on GitHub↗

    This project provides a complete OpenVPN server deployment packaged as a Docker container, with an integrated EasyRSA certificate authority for automated public-key infrastructure management. It handles the full lifecycle of a VPN server, from initial PKI bootstrap and server configuration generation to client certificate issuance and revocation, all within a containerized environment. The server is configured entirely through Docker environment variables, eliminating the need for manual configuration file editing. It supports time-based one-time password (TOTP) authentication as a second fac

    Shelldockerdocker-containerdocker-openvpn
    View on GitHub↗9,089
  • bubka/2fauthBubka avatar

    Bubka/2FAuth

    3,779View on GitHub↗

    2FAuth is a self-hosted two-factor authentication server and credential vault. It functions as a web-based authenticator app used to organize and generate time-based one-time passwords and other security codes for multiple accounts in a central location. The system distinguishes itself as an API-driven security manager, allowing authentication codes to be integrated into automated workflows and external applications. It also supports shared security credentialing through the use of isolated vaults and shared folders for team collaboration. The project covers a broad range of security and dat

    PHP2fa2factorhotp
    View on GitHub↗3,779
Compare all 30 related projects→

Curated searches featuring Google Authenticator Libpam

Hand-picked collections where Google Authenticator Libpam appears.
  • MFA and TOTP Authentication Libraries