{"id":21258792,"url":"https://github.com/watfaq/softu2f-win","last_synced_at":"2025-07-11T02:32:50.827Z","repository":{"id":37891032,"uuid":"143150083","full_name":"Watfaq/SoftU2F-Win","owner":"Watfaq","description":"Software U2F authenticator for Windows","archived":false,"fork":false,"pushed_at":"2024-01-28T13:21:09.000Z","size":210,"stargazers_count":76,"open_issues_count":12,"forks_count":22,"subscribers_count":9,"default_branch":"master","last_synced_at":"2025-04-05T19:34:19.487Z","etag":null,"topics":["cryptography","driver","fido-u2f","u2f-authenticator","windows"],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"unlicense","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Watfaq.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null},"funding":{"github":["ibigbug"],"patreon":null,"open_collective":null,"ko_fi":null,"tidelift":null,"community_bridge":null,"liberapay":null,"issuehunt":null,"otechie":null,"custom":null}},"created_at":"2018-08-01T11:59:58.000Z","updated_at":"2025-03-25T02:53:50.000Z","dependencies_parsed_at":"2024-01-28T14:46:10.485Z","dependency_job_id":null,"html_url":"https://github.com/Watfaq/SoftU2F-Win","commit_stats":null,"previous_names":[],"tags_count":9,"template":false,"template_full_name":null,"purl":"pkg:github/Watfaq/SoftU2F-Win","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Watfaq%2FSoftU2F-Win","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Watfaq%2FSoftU2F-Win/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Watfaq%2FSoftU2F-Win/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Watfaq%2FSoftU2F-Win/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Watfaq","download_url":"https://codeload.github.com/Watfaq/SoftU2F-Win/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Watfaq%2FSoftU2F-Win/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":264712884,"owners_count":23652681,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cryptography","driver","fido-u2f","u2f-authenticator","windows"],"created_at":"2024-11-21T04:10:38.354Z","updated_at":"2025-07-11T02:32:50.378Z","avatar_url":"https://github.com/Watfaq.png","language":"C","funding_links":["https://github.com/sponsors/ibigbug"],"categories":[],"sub_categories":[],"readme":"[SoftU2F-Win](https://ibigbug.online/softu2f-for-windows) is a software U2F authenticator for Windows. It emulates a hardware U2F HID device and performs cryptographic operations using the DPAPI. This tool works with Google Chrome. Running on other browsers hasn't been tested.\n\nWe take the security of this project seriously. Report any security vulnerabilities to open-source@watfaq.com\n\n[![Publish Daemon](https://github.com/SoftU2F/SoftU2F-Win/actions/workflows/release.yml/badge.svg)](https://github.com/SoftU2F/SoftU2F-Win/actions/workflows/release.yml)\n\n## Installation\n\n\u003e **Please use it for production environment on your own risk**\n\n### Download\n\n1. Download the latest driver and daemon release at [Driver Release](https://github.com/SoftU2F/SoftU2F-Win/releases)\n\n1. Run the `driver-install.ps1` in elevated powershell to install the driver. (Run `Set-ExecutionPolicy RemoteSigned` if needed)\n\n\n## Usage\n\nThe app runs in the background. When a site loaded in a U2F-compatible browser attempts to register or authenticate with the software token, you'll see a notification asking you to accept or reject the request. You can experiment on [Yubico's U2F demo site](https://demo.yubico.com/u2f).\n\n### Command Line Arguments\n- *--db-unprotected* - this will save the key pair into a separated sqlite db without the DPAPI protection, this can be useful if you want to back up the db for some reasons. when enabled, the data will be saved in to `db.unprotected.sqlite`. You can find the databases under `$HOME\\AppData\\Roaming\\SoftU2FDaemon`\n\n### Registration\n\n![Registration](https://user-images.githubusercontent.com/543405/59797397-e9ab4e80-9322-11e9-9f36-555b608f926d.png)\n\n### Authentication\n\n![Authentication](https://user-images.githubusercontent.com/543405/59797166-6c7fd980-9322-11e9-952d-c3f353a09a65.png)\n\n## Uninstalling\n\n### Driver\n\n1. Right Click the Windows logo on you status bar and open Device Manager\n2. Under Human Interface Devices, find **SoftU2F Device**, right click and select **Uninstall Device**\n\n### Daemon\n\n1. Exit App\n2. Delete the folder where you extracted them.\n\n## Security considerations\n\nThis is a port of https://github.com/github/SoftU2F.\n\nInstead of macOS Keychain, we store data using Windows DPAPI, which is designed by Microsoft Windows to store data data such as passwords, keys, and connection strings.\n\nFor more infomation of DPAPI: https://docs.microsoft.com/en-us/dotnet/api/system.security.cryptography.protecteddata?view=netframework-4.8#remarks\n\nA [note](https://github.com/github/SoftU2F#security-considerations) from Github Team\n\n## Development\n\n### Prerequisites\n\n### Driver\n\nInstall:\n\n* Microsoft Visual Studio\n* Windows SDK\n* Windows Driver Kit (WDK)\n\nDownload and tutorials can be found at: https://docs.microsoft.com/en-us/windows-hardware/drivers/gettingstarted/writing-a-very-small-kmdf--driver\n\nAnd you should be able to compile the driver in Visual Studio.\n\n### Daemon\n\nDaemon is just an NET Core project, no extra requirement other than developing a normal NET Core apps.\n\n## Sponsorships\n\n- Razoreye LTD's fund for the driver signing\n\n## Known app-IDs/facets\n\nEvery website using U2F has an app-ID. For example, the app-ID of [Yubico's U2F demo page](https://demo.yubico.com/u2f) is `https://demo.yubico.com`. When the low-level U2F authenticator receives a request to register/authenticate a website, it doesn't receive the friendly app-ID string. Instead, it receives a SHA256 digest of the app-ID. To be able to show a helpful alert message when a website is trying to register/authenticate, a list of app-ID digests is maintained in this repository. You can find the list [here](https://github.com/ibigbug/SoftU2F-Win/blob/master/APDU/KnownFacets.cs). If your company's app-ID is missing from this list, open a pull request to add it.\n\n## Licensing\n\nThis project is [Unlicensed](https://github.com/ibigbug/SoftU2F-Win/blob/master/LICENSE) yet.\n\n## Credits\n\nLots of credits to the original work of [SoftU2F](https://github.com/github/SoftU2F) done by Github team.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwatfaq%2Fsoftu2f-win","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fwatfaq%2Fsoftu2f-win","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwatfaq%2Fsoftu2f-win/lists"}