13
fingerprint or bluetooth auth?
(lemmy.world)
Linux questions Rules (in addition of the Lemmy.zip rules)
Tips for giving and receiving help
Any rule violations will result in disciplinary actions
Fprintd is what you’re looking for. KDE and Gnome have built in support for it. Some distros like Fedora have it installed by default.
I have an inexpensive u.are.u 4500 and it works well enough for my uses.
The other alternative is to use pam_u2f with FIDO2 keys eg yubikey, solo key, etc. That will also enable you to use ssh -sk keys too if that’s important to you.
As with most things like this you can combine them to have 1FA, 2FA, or 3FA. You can even tie it into FreeIPA if you use that. You can also combine to lock yourself out of your system completely. So have fun!
It really depends on the age of the hardware if fprintd is going to have support for the sensor. I have a ThinkPad T80s and fprintd doesn't cover my sensor.
I would probably stick with Bluetooth because it generally works fine across all my machines, while the fingerprint sensor is super finicky and this is the third machine I've had this issue with.