A webcam is not a depth sensor.
Lunlo uses an RGB camera. It does not gain Apple Face ID’s depth-sensing hardware by recognizing a face. Liveness checks can reject some unsuitable inputs, but they cannot reliably defeat video replay. Lighting, camera placement, and changes in appearance also affect recognition. There are no published Lunlo accuracy or spoof-resistance results that justify a stronger claim.
For more detail, see liveness and camera recognition. If you need a proven Mac unlock option today, compare the built-in alternatives.
The Mac password remains part of the system.
The intended unlock flow uses Accessibility permission to enter a saved Mac password into the existing lock screen. That is a powerful permission, and password-entry timing has risks. It is not a replacement authentication mechanism inside macOS. FileVault, the first login after restarting, and logged-out sessions remain outside Lunlo’s intended scope.
Never enter your Mac login password on the Lunlo website. Password setup belongs inside the native app on a Mac you are authorized to use.
Local recognition and an encrypted vault.
The implemented design processes camera frames in memory. Enrollment data and the saved Mac password are encrypted locally, with the encryption key protected by macOS Keychain. An authorized session can hold that key in memory while it is needed. Encryption at rest protects stored data; it does not eliminate risks from a compromised or already-unlocked Mac.
Local does not mean entirely offline.
Account sign-in and membership verification require network services. Those services handle account and billing state, rather than face frames or the Mac password. Face unlock requires verified membership as well as local authorization. An unverified account cannot grant access merely because the camera recognizes someone.
What has—and has not—been established.
Local software tests and disk-image checks help detect implementation and packaging errors. They do not establish real-world biometric security or prove a successful unlock on your hardware. The current development build is not Apple-notarized, and real enrollment, lock-screen behavior, and spoof resistance still need validation. Sign-in, checkout, and public download remain closed during this work.
Review what Lunlo stores locally and the distinct controls for removing enrollment and password data.