121 lines
2.2 KiB
Markdown
121 lines
2.2 KiB
Markdown
---
|
|
publish: true
|
|
permalink: /10-19 LIFE/13 TECH SETUP/13.13 OS SETUP/fprintd.md
|
|
title: fprintd
|
|
created: 2026-02-05T09:31:46.737-07:00
|
|
modified: 2026-02-05T09:32:30.884-07:00
|
|
tags:
|
|
- security
|
|
- fingerprint
|
|
- authentication
|
|
cssclasses: ""
|
|
---
|
|
|
|
Fingerprint authentication daemon for Linux. Works with [[10-19 LIFE/13 TECH SETUP/13.13 OS SETUP/hyprlock]] and system login.
|
|
|
|
## Installation
|
|
|
|
```bash
|
|
sudo pacman -S fprintd
|
|
```
|
|
|
|
The service starts on-demand, no need to enable it.
|
|
|
|
## Enroll Fingerprints
|
|
|
|
```bash
|
|
# Enroll a finger (follow prompts)
|
|
fprintd-enroll
|
|
|
|
# Enroll specific finger
|
|
fprintd-enroll -f right-index-finger
|
|
|
|
# List enrolled fingerprints
|
|
fprintd-list $USER
|
|
```
|
|
## PAM Configuration
|
|
|
|
### For hyprlock
|
|
|
|
Create `/etc/pam.d/hyprlock`:
|
|
```
|
|
# PAM configuration file for hyprlock
|
|
auth include login
|
|
```
|
|
|
|
This inherits from the login config which includes fprintd.
|
|
|
|
### For system login
|
|
|
|
Edit `/etc/pam.d/system-local-login` — usually already configured if using default Arch PAM.
|
|
|
|
### Manual PAM setup
|
|
|
|
To add fingerprint auth to any PAM service, add before password auth:
|
|
```
|
|
auth sufficient pam_fprintd.so
|
|
```
|
|
|
|
## hyprlock Integration
|
|
|
|
Enable in `~/.config/hypr/hyprlock.conf`:
|
|
```bash
|
|
auth {
|
|
fingerprint {
|
|
enabled = true
|
|
ready_message = Scan fingerprint to unlock
|
|
present_message = Scanning...
|
|
retry_delay = 250
|
|
}
|
|
}
|
|
```
|
|
|
|
## Troubleshooting
|
|
|
|
### Check service status
|
|
|
|
```bash
|
|
systemctl status fprintd
|
|
```
|
|
|
|
### Verify device detection
|
|
|
|
```bash
|
|
fprintd-list $USER
|
|
```
|
|
|
|
Should show your fingerprint reader device.
|
|
|
|
### Re-enroll if not working
|
|
|
|
```bash
|
|
fprintd-delete $USER # Delete all prints
|
|
fprintd-enroll # Re-enroll
|
|
```
|
|
|
|
### Debug
|
|
|
|
```bash
|
|
# Run fprintd in foreground with debug
|
|
sudo /usr/libexec/fprintd -d
|
|
```
|
|
|
|
## Supported Devices
|
|
|
|
Framework Laptop 13 uses the **Goodix MOC Fingerprint Sensor** which works out of the box with fprintd.
|
|
|
|
Check if your device is supported:
|
|
```bash
|
|
lsusb | grep -i fingerprint
|
|
```
|
|
|
|
## Security Notes
|
|
|
|
- Fingerprint is "sufficient" not "required" — password always works as fallback
|
|
- Fingerprints are stored encrypted in `/var/lib/fprint/`
|
|
- Consider if fingerprint auth meets your security requirements
|
|
|
|
## Resources
|
|
|
|
- Arch Wiki: https://wiki.archlinux.org/title/Fprint
|