Your face or fingerprint unlocks Linux

Login, lock screen, sudo, and app prompts like Bitwarden. In the dark, with an IR camera. Enrollment stores embeddings, never images. Password fallback stays available.

Setup · Commands · Limits · FAQ · All docs

evolved since - COMMANDS.md and TUI.md document the current ones.

[!IMPORTANT] A printed photograph of an enrolled face passes the algorithmic IR gate alone (accepted in 69 of 70 measured presentations). The shipped PAD pair (ViT RGB + FLIR IR) refuses it, runs default-on, and verifies against signed checksums at startup. Missing, disabled, or failed required PAD falls back to password without granting face authentication; kill switches …