PulseUnlock

Unlock your PC with your phone. Instead of typing your password at the login screen, the lock screen or a permission prompt, just confirm it with your fingerprint or face on your Android phone.

This repository holds the desktop app. The phone app is available on Google Play:

• Unlock your PC with your Android phone
• Works over Wi-Fi, LAN or Bluetooth. No sign-up and no internet connection required
• Unlock from anywhere over the internet with Cloud. No sign-up required. Traffic is end-to-end encrypted
• Finds your PC automatically, so there is nothing to configure
• Pair by scanning a QR code, or by entering a pairing code by hand
• Pair multiple phones, and different phones for different user accounts
• Wake your PC with Wake-on-LAN before unlocking it
• Windows and Linux on x64 and ARM, plus macOS* on Apple Silicon

Windows

• Login and lock screen
• UAC prompts

Linux

• Login and lock screen (GDM, SDDM, LightDM, KDE, Cinnamon, Hyprlock)
• sudo and polkit
• SSH logins for configured hosts

macOS*

• sudo and system permission prompts
• SSH logins for configured hosts

* experimental

Download the latest release for your system from the releases page, then follow the installation guide, which walks through the system requirements, the setup and the pairing.

When your PC needs your password, it asks your paired phone. You confirm with your fingerprint or face, and the phone sends back the key that lets your PC unlock itself. Everything the two devices exchange is encrypted so that only they can read it.

While pairing you choose how the two devices talk to each other.

Automatic (Cloud) (recommended): your phone pops up the unlock prompt by itself, from anywhere over the internet. Both devices only need to be online, and it is easy on your phone's battery. Traffic through the cloud is end-to-end encrypted. Requires a Cloud subscription in the app.

Automatic (Local) means your phone pops up the unlock prompt by itself as soon as your PC asks for it, over your local network or Bluetooth. You can pick the connection it uses:

• UDP (recommended for local): works on any local network, and keeps working when your phone's IP address changes.
• TCP: a little faster, but best with a static IP for your phone.
• Bluetooth: no network needed, ideal for notebooks and tablets on the go, at the cost of some battery life.

Manual means nothing waits in the background on your phone. You simply open the app and start the unlock from there, if you prefer it that way.

If anything ever goes wrong, nothing is lost: hold Left Ctrl + Left Alt to cancel, and log in with your password as usual.

PulseUnlock is designed so that using it does not make your PC easier to break into.

Your password never leaves your PC. It is stored encrypted, and the key to it lives only on your paired phone. Your phone never sees your password, it only holds the key, and the password is never sent over the network or to anyone else. Without your phone the stored copy is unreadable, so someone who takes the file off your PC gets nothing usable. On top of that, the file is locked down so that only the system can access it.

Nothing is bypassed. The unlock ends with your normal password being checked by Windows or PAM, exactly as if you had typed it. No security policy, account restriction or lockout is skipped.

Everything is end-to-end encrypted. Pairing and unlocking are protected with modern authenticated encryption (AES-256-GCM), with keys that are exchanged out of band through the QR code you scan. Every message is authenticated, so it cannot be altered in transit. Each unlock has to answer a one-time challenge and carries a timestamp, so a recorded response cannot be replayed later to unlock your PC.

Nothing leaves your network, if you choose. Whatever your PC and your phone say to each other is encrypted with keys that only those two devices hold, so it is unreadable to anyone else, including us. If you pair locally, this app only leaves your network to check for a new version and, if you decide to install one, to download it. The phone app can send automatic crash reports. You can turn that off in its settings.

Cloud cannot read the traffic. If you pair over Cloud, your PC and phone connect through our servers so they can reach each other from different networks. That traffic is end-to-end encrypted with keys that only those two devices hold, so it is unreadable to anyone else, including us.

Your PC stays closed. For local pairing and unlocking, the app only accepts connections while you are pairing or while an unlock is actually running, and stops listening again as soon as it is done. Cloud never listens for incoming connections; your PC connects out to the relay instead.

It's auditable. The full source of both the app and the login components is in this repository, under the GPL.

Found a security issue? Please report it privately through GitHub security advisories instead of a public issue.

You need CMake 3.22+, a C++23 compiler, Qt 6 and OpenSSL 3. Boost, spdlog and nlohmann/json are downloaded automatically during configuration.

Windows: Visual Studio 2026, the Windows SDK, Inno Setup for the installer, and vcpkg with VCPKG_ROOT set:

vcpkg install --overlay-triplets=cmake/vcpkg-triplets --triplet x64-windows-static openssl
vcpkg install --overlay-triplets=cmake/vcpkg-triplets --triplet x64-windows-static-md openssl

For ARM builds, use the arm64-windows-static and arm64-windows-static-md triplets instead.

Linux

sudo apt install build-essential pkg-config cmake git \
     libssl-dev libpam-dev libcrypt-dev libbluetooth-dev \
     libgl1-mesa-dev libegl1-mesa-dev libxkbcommon-x11-dev libxcb-cursor-dev

Install Qt 6 with the official installer or aqtinstall.

macOS: Xcode command line tools, Qt for macOS, and OpenSSL 3:

brew install openssl@3

cmake -B build -DCMAKE_BUILD_TYPE=Debug
cmake --build build

Qt is detected automatically; pass -DQT_BASE_DIR=<path> to pick a specific installation.

From the pkg directory, ./build-desktop.sh builds and packages a release: a setup executable on Windows, an AppImage on Linux, or a disk image on macOS. Platform, architecture and Qt path are detected automatically, or can be set through the PLATFORM, ARCH and QT_BASE_DIR environment variables.

cd pkg && ./build-desktop.sh

Connection problems, pairing issues and how to get back into a PC that won't let you in are covered in the troubleshooting guide.

For anything else, the app has two tools built in: a log viewer for both the app and the login component, with a debug logging switch in the settings, and an unlock test that lets you try a paired device without locking your screen.

Issues and pull requests are welcome. A few pointers:

• The code style is enforced by the checked-in .clang-format and .clang-tidy. Please run clang-format before submitting.
• Translations: copy common/res/en_US.json, translate the values, then register the new file in common/CMakeLists.txt (embed_json), common/src/utils/I18n.cpp and LocaleHelper.
• Bug reports: please use the issue template and attach the desktop and module logs; they are what make network and PAM problems diagnosable.

GNU General Public License v3.0

• Website: meis-apps.com
• Android app: Google Play
• Support the project: Ko-fi