privacyIDEA is an MFA platform that helps secure applications and infrastructure with additional authentication factors. It is designed as a self-hosted, on-premise system, so user data can remain within an organisation’s own infrastructure.
The software supports a broad range of authentication methods including passkeys, FIDO2/WebAuthn devices, push authentication, HOTP/TOTP, SMS, email, SSH keys, smartcards, X.509 certificates, security questions, and registration codes. It integrates with systems such as SSH, VPNs, Linux PAM, Windows login, Keycloak, ADFS, Shibboleth, SimpleSAMLphp, Apache, Nginx, nextCloud, ownCloud, and web portals via a REST API.
This is free and open source software.
Key Features
- Self-hosted multi-factor authentication platform.
- Supports passkeys, FIDO2/WebAuthn, OTP, push, SMS, email, SSH keys, and certificates.
- Works with existing user stores including AD, LDAP, SQL, and Entra ID.
- Integrates with VPNs, SSH, Linux PAM, Windows login, identity providers, and web applications.
- REST API for custom integrations.
- Admin interface for managing users, realms, policies, tokens, and authentication workflows.
- On-premise deployment keeps sensitive user data within your own infrastructure.
Website: github.com/privacyidea/privacyidea
Support:
Developer: NetKnights
License: GNU Affero General Public License v3.0
privacyIDEA is written in Python and TypeScript. Learn Python with our recommended free books and free tutorials. Learn TypeScript with our recommended free books and free tutorials.
Related Software
| Intrusion Prevention for SSH | |
|---|---|
| Fail2Ban | Intrusion prevention software framework written in Python |
| CrowdSec | Modern and collaborative behavior detection engine |
| SSHGuard | Protects hosts from brute-force attacks against SSH and other services |
| denyhosts | Helps thwart SSH server attacks |
| IPBan | Detects repeated failed logins |
| CSF | ConfigServer Security & Firewall |
| reaction | Daemon that scans program outputs for repeated patterns, and takes action |
| BFD | Log-based security tool that detects authentication failures |
Read our verdict in the software roundup.
 Explore our carefully curated directory of recommended free and open source software, covering every major software category.The directory forms part of our extensive collection of articles for Linux enthusiasts. It includes hundreds of detailed reviews, together with free and open source alternatives to proprietary software from companies such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. LinuxLinks also covers interesting projects worth exploring, Linux-compatible hardware, free programming books and tutorials, and much more. Know a useful free and open source Linux application that we haven’t covered? Tell us about it using our submission form. |
Please read our Comment Policy before commenting.