Back to browse
Pinhead – Adding 2FA to Your CLI (Linux, FreeBSD, OpenBSD, NetBSD)

Pinhead – Adding 2FA to Your CLI (Linux, FreeBSD, OpenBSD, NetBSD)

by voidbrainvoid·Mar 3, 2026·4 points·0 comments

AI Analysis

●●SolidNiche GemCozy

Zero-dependency 2FA for CLI without the bloat others add.

Strengths
  • Pure ANSI C with no external deps beyond libc—genuinely embeddable in legacy systems.
  • Tested across Linux, FreeBSD, OpenBSD, NetBSD—rare portability rigor.
  • Syslog integration and straightforward CLI UX for sysadmin workflows.
Weaknesses
  • 2FA/TOTP is solved territory (Google Authenticator, Authy, FreeOTP already exist).
  • Niche audience—CLI-only 2FA appeal is narrow even among sysadmins.
Category
Target Audience

Sysadmins, DevOps engineers, Unix enthusiasts

Similar To

Google Authenticator · Authy · FreeOTP

Post Description

Hi everyone,

I’ve developed a minimalist 2FA tool (TOTP) for CLI. My goal was to create something with the widest possible reach across Unix-like systems without the typical dependency bloat.

Key features:

- Pure ANSI C: No external dependencies beyond libc.

- Wide Portability: Tested and running on Linux, FreeBSD, OpenBSD, and NetBSD.

- Security focused: Fixed-width types, endianness-aware, and compiled with stack protection flags.

- Lightweight: Fast execution, ideal for integration into scripts and legacy infrastructure.

- Build for final users is gmake based but without autotools.

The project is hosted on Codeberg under the BSD-3-Clause license. I’m currently in the final polishing stage and would love to hear your thoughts on the code structure and portability.

Check it out here: https://codeberg.org/rafael-santiago/pinhead

Similar Projects

MTTCleaner – Same as CCleaner but free, no ads

CCleaner alternative in PowerShell, but BleachBit already does this free.

Ship It
mytechtoday
101mo ago

OneManBSD– An offline-rebuildable OpenBSD system with source in the ISO

Puts the entire OpenBSD source tree into a single installer image so you can rebuild on a laptop with no network dependency — that’s a neat, principled stunt for anyone worried about centralised source hosting. The landing page and notes reveal it's very much a hacker's tool (root-only install, minimal docs), so expect manual steps and rough UX rather than a polished consumer installer.

Niche GemWizardry
bialamusic
213mo ago