USBGuard

github.com/USBGuard/usbguard Desktop & OS Privacy Open-source projectOpen source

Set USB device authorization rules with USBGuard, a framework for controlling device access.

github.com/USBGuard/usbguard
USBGuard homepage screenshot

About USBGuard

USBGuard is a software framework for Linux for implementing USB device authorization policies and method-of-use policies. It works as a USB device allowlisting tool that controls what kinds of USB devices are authorized and how a device may interact with the system.

It runs as a daemon using a rules file and can generate an initial policy from currently attached devices. A rules file must be generated before starting the daemon for the first time, or attached devices including mouse and keyboard may stop working and lock the user out.

Key features

  • Authorize USB devices based on allowlist rules
  • Control how authorized USB devices interact with system
  • Generate initial policy from currently connected devices
  • Run as background daemon with systemd service unit
  • Configure rules via usbguard-rules.conf policy file
  • Optional LDAP support at compile time
Best for: Linux users who want to control which USB devices are allowed to connect to their system.
Good for
  • Focuses on USB device authorization and use policies
  • Can generate initial rules from currently attached devices
  • Open source with manual pages for daemon and configuration
Watch out for
  • Designed for Linux only
  • Requires generating a policy before first start to avoid lockout
  • Building from source requires C++17 and multiple dependencies

USBGuard at a glance

Type
Open-source project
Pricing
Not confirmed. Check the site
Platforms
Linux
Open source
Yes · Source code
Language
English
Last checked
Oct 5, 2026 · Online when checked
Listed
Oct 5, 2026

USBGuard alternatives

Tools and sites you could use instead, ranked by how closely they match.

All 24 alternatives

Popular in Desktop & OS Privacy

Well-known listings from the same topic.

All 61

USBGuard FAQ

How do I prevent being locked out when starting USBGuard for the first time?
Generate a rules file from currently attached devices with `sudo sh -c 'usbguard generate-policy > /etc/usbguard/rules.conf'` before starting the daemon.
What is required to compile USBGuard from source?
At least C++17, plus development files for libqb, protobuf, and libsodium or libgcrypt.
Is something wrong or out of date?

Tell us and an editor will check it.

Own this website?

Claim the listing and suggest updates yourself. An editor checks every claim first.

Claim this listing