Event

<p>Passkeys are now first-class citizens on Windows, macOS, Android and iOS - but the Linux desktop still has no standard FIDO2 platform APIs for browsers and native apps. </p> <p>This talk presents <strong>Credentials for Linux</strong> (<a href="https://github.com/linux-credentials">github.com/linux-credentials</a>), a cross-desktop effort to bring Passkeys and other credentials to Linux in a way that works for sandboxed apps and browsers alike.</p> <p>We’ll cover:</p> <ul> <li><strong>Very short refresher on passkeys &amp; platform authenticators</strong>: Why WebAuthn/FIDO2 passkeys matter, what platform authenticators are, and how this is solved on Windows Hello, Android and Apple platforms today, and the current state on Linux. </li> <li><strong>Architecture of Credentials for Linux</strong></li> <li><a href="https://github.com/linux-credentials/libwebauthn"><code>libwebauthn</code></a>: a Rust FIDO2/U2F platform library with support for USB, BLE and Hybrid authenticators (ie. Android &amp; iOS smartphones), designed with pluggable transports and passkey features such as resident keys and user verification. </li> <li><a href="https://github.com/linux-credentials/credentialsd"><code>credentialsd</code></a>: a D-Bus service and proposed XDG portal for credential management, including a reference UI, Firefox integration (web extension + patched Flatpak build) and distro packages via OBS (Fedora/openSUSE). </li> <li><strong>What this looks like for apps and browsers</strong>: Demo and design walkthrough of a sandboxed Firefox using <code>credentialsd</code> to talk to hardware security keys and phones, and how native applications can use the same D-Bus API. </li> <li><strong>Roadmap, open problems and call for collaborators</strong>: TPM-backed platform authenticators, origin binding and unprivileged APIs for browsers, and how we’d like to work with GNOME, KDE, Flatpak, password managers and distributions. </li> </ul> <p>The talk is aimed at people interested in identity and access management on the desktop: browser and desktop maintainers, distribution engineers, security practitioners and anyone who wants to help make passkeys a first-class citizen of the Linux platform.</p>