https://www.pistack.xyz/tags/u2f/ Recent content in U2f on Pi Stack Hugo en-us Thu, 21 May 2026 00:00:00 +0000 https://www.pistack.xyz/posts/2026-05-24-self-hosted-pam-mfa-u2f-totp-oath-guide/ Thu, 21 May 2026 00:00:00 +0000 https://www.pistack.xyz/posts/2026-05-24-self-hosted-pam-mfa-u2f-totp-oath-guide/ <p>Multi-factor authentication (MFA) is essential for securing self-hosted servers, but most organizations rely on cloud-based MFA services like Duo, Okta, or Azure MFA. For fully self-hosted infrastructure, PAM (Pluggable Authentication Module) provides MFA capabilities without external dependencies. In this guide, we compare three open-source PAM MFA modules: <strong>pam-u2f</strong> (FIDO2/U2F hardware keys), <strong>Google Authenticator PAM</strong> (TOTP time-based codes), and <strong>libpam-oath</strong> (OATH HOTP/TOTP protocols) — evaluating their security models, deployment complexity, and user experience.</p>