Skip to content

v1.20.0-beta.1 — first public beta

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Jun 07:01
· 19 commits to main since this release
v1.20.0-beta.1
0e63fef

immurok for macOS — first public beta 🎉

One touch. No more passwords.

immurok is a compact wireless Bluetooth fingerprint authenticator for desktop Macs (and Linux). It replaces passwords with your fingerprint for everyday actions — screen unlock, sudo, SSH/Git signing, and authorizing the commands your AI coding agent runs — with a single touch. Built for Mac mini / Studio / Pro and closed-lid MacBook setups that have no Touch ID.

⚠️ Beta. This is the first public release. It works end-to-end, but expect rough edges. Please file issues for anything you hit.

What you get

This installer is signed with a Developer ID certificate and notarized by Apple — it installs without Gatekeeper warnings.

Path Component
/Applications/immurok.app Menu-bar companion app (BLE, screen unlock, settings)
/usr/local/bin/imk CLI — wrap agent commands behind a fingerprint gate
/usr/local/lib/pam/pam_immurok.so PAM module for sudo / system authorization

The installer also wires pam_immurok into /etc/pam.d/sudo_local and /etc/pam.d/authorization.

Features

  • Screen unlock — touch the sensor while locked; no lid, no typing.
  • sudo & system authorization — approve terminal sudo and System Settings prompts by fingerprint, via a real PAM module (not password autofill).
  • SSH & Git commit signing — an on-device ECDSA P-256 key (private key never leaves the hardware) signs your SSH logins and Git commits.
  • Agent authorization gate — imk run --agent -- <cmd> surfaces an on-screen prompt so a single fingerprint touch authorizes commands your AI coding agent (Claude Code, Cursor, Codex, …) runs on your behalf — sudo, git push, secret reads.

Requirements

  • macOS 13 (Ventura) or later — universal binary (Apple Silicon + Intel)
  • An immurok fingerprint device, paired over Bluetooth

Install

  1. Download immurok-1.20.0-beta.1.pkg below and run it.
  2. Open /Applications/immurok.app and grant the Accessibility permission when prompted.
  3. From the menu-bar icon → Open Settings, set your Mac login password (used to perform screen unlock).
  4. Pair your device, enroll a fingerprint, then lock the screen and touch the sensor to test.

Uninstall

Use the in-app Uninstall action (menu bar → Settings → Uninstall). It runs a signed uninstaller that removes the PAM module and unwires it from /etc/pam.d/sudo_local and /etc/pam.d/authorization, along with the app, the imk CLI, and your local data.

⚠️ Do not just rm the app. That leaves the pam_immurok lines in /etc/pam.d/* pointing at a module that no longer exists, which can break sudo and system authentication.

To uninstall manually, remove the PAM lines first, then the files:

# 1. unwire the PAM module (do this BEFORE deleting the .so)
sudo sed -i '' '/pam_immurok/d' /etc/pam.d/sudo_local /etc/pam.d/authorization
# 2. remove the module, CLI, and app
sudo rm -f /usr/local/lib/pam/pam_immurok.so /usr/local/bin/imk
sudo rm -rf /Applications/immurok.app
# 3. drop the installer receipt and your local data
sudo pkgutil --forget com.immurok.pkg
rm -rf ~/.immurok

Full Changelog: https://github.com/immurok/app-macos/commits/v1.20.0-beta.1

Assets 3
Loading