Lock-screen only Return
The lock-screen path may type the Keychain password and press Return only after locked-session checks and the configured approval provider policy pass.
Local macOS helper
Unlock assist, kept local.
FacePass helps with narrow workflows on your own Mac: local recognition lock-screen unlock assist, independent iPhone StandBy Unlock approval, and value-only fill for approved administrator or System Settings authorization prompts.
Not Apple Face ID, Touch ID, system biometrics, or a replacement for macOS authentication.
What FacePass does
Focused assistance, not broad autofill.
FacePass is a native macOS 13+ menu-bar app with optional paired-iPhone approval. It keeps local recognition, provider routing, conditions, password retrieval, and Accessibility actions under local control.
Unlock Mode lets users route approved flows through local recognition, iPhone StandBy Unlock, both providers, or local recognition for lock-screen unlock plus iPhone approval for approved prompt fill. Ordinary webpage or app password fields are not supported targets.
Safety boundaries
Built around explicit limits.
Prompt fill is value-only
Administrator/System Settings prompt handling fills the password value only. It never clicks OK, Continue, Modify Settings, Login, submit, or presses Return.
No broad password targeting
FacePass rejects ordinary website and app password fields. Detection is narrow, allowlisted, and aimed at approved macOS authorization contexts.
How it works
Short windows. Local checks. Clear exits.
Confirm scope
FacePass first confirms the requested flow is one of the approved macOS targets.
Run local recognition
Sensitive recognition gates wait up to 10 seconds for the first accepted local match, then may take short follow-up captures for the remaining required match before returning immediately. Raw frames and photos are not persisted.
Apply the narrow action
FacePass fills or types only within the approved behavior for that specific flow.
Feature highlights
Small surface area, practical controls.
Menu-bar app
A lightweight background app with a full settings window.
Local recognition unlock
Lock-screen assist can wait up to 10 seconds for the first accepted local match, then use short follow-up captures for the required second match before the locked-session typing path.
iPhone StandBy Unlock
StandBy, Live Activity, Dynamic Island, AppIntent, or static widget surfaces can send signed local requests without receiving the Mac password.
Unlock Mode routing
Users choose local recognition, iPhone approval, both providers, or split routing by approved flow.
Privacy
No cloud service. No analytics. No telemetry.
- No password values in files, logs, screenshots, or debug output.
- No upload of passwords, face data, raw camera frames, unlock state, Wi-Fi details, display identifiers, or environment signals.
- Local HTTP and Bonjour are limited to paired-device status, pairing, rediscovery, and signed StandBy Unlock requests.
Roadmap
Planned work stays inside the same safety model.
Download the Mac app and get the iPhone companion.
Normal users should use the latest Developer ID-signed and notarized macOS DMG from GitHub Releases or the website download link when available. The iPhone companion is available through its App Store listing. These paths do not change the no-cloud, no-telemetry, no-upload, no-Mac-password-to-iPhone boundary.