Unlocking a Mac with your face: what exists, what actually protects you, and how to lock your apps

Can a Mac have Face ID?

No model does today, and Apple hasn't announced one. Face ID relies on the TrueDepth camera of iPhone and iPad Pro: it projects thousands of invisible dots to build a depth map of your face, captures an infrared image, and compares them with the enrolled data inside the Secure Enclave. Apple spells it out: Face ID always requires depth information, which isn't found in print or 2D digital photographs. The probability that a random person could unlock the device is less than 1 in 1,000,000.

A Mac's camera, by contrast, sees only a flat color image. That difference matters for everything that follows.

The secure ways to unlock a Mac

Touch ID

1. Choose Apple menu › System Settings, then click Touch ID & Password in the sidebar.
2. Click Add Fingerprint, enter your password, then follow the onscreen instructions: up to three fingerprints per account, five per Mac.
3. Turn on Use Touch ID to unlock your Mac, and, if you like, Apple Pay, purchases and password autofill.

Touch ID is built into recent MacBook Air and Pro models, and the Magic Keyboard with Touch ID brings it to any Mac with Apple silicon. Apple puts the chance that another fingerprint matches at 1 in 50,000, and your password is still required at startup.

Apple Watch

In the same settings, Use Apple Watch to unlock your apps and your Mac unlocks the Mac when it wakes and approves apps' password requests, if your Mac supports Auto Unlock. No iPhone, on the other hand, can unlock a Mac with Face ID.

Lock the screen when you leave

Control ⌘ Q locks your screen immediately. In System Settings › Lock Screen, set Require password after screen saver begins or display is turned off to a short delay.

Lock your notes, photos and apps

Notes: locked notes

1. In Notes, choose Notes › Settings, then in the pop-up menu next to Locked notes, click Use Login Password (or create a custom password).
2. Select Use Touch ID if your Mac or keyboard has it.
3. In a note, click the lock button next to the search field, then choose Lock Note.

Careful: if you forget a custom password and Touch ID can't open the notes, Apple can't give them back to you.

Photos: the Hidden album

Since macOS Ventura, the Hidden album is locked by default: it opens with Touch ID or your login password. To hide photos, select them and choose Image › Hide [number] Photos; to show the album, choose View › Show Hidden Photo Album.

Safari: private browsing windows

Choose Safari › Settings, click Privacy, then select "Require Touch ID to view locked tabs" (or the password version, without Touch ID). Private windows lock when you lock your screen or after they sit unused for a while.

A whole app: third-party app lockers

macOS can't lock Messages or any other app behind a password. That's what app lockers are for: they sit in the menu bar and ask for Touch ID, an Apple Watch or your password when someone opens a protected app. Two examples, checked on September 27, 2026:

• MakLock: free and open source (MIT license), macOS 13 or later, version 1.0.1 of March 2026. It covers the protected app with a blurred overlay until you unlock with Touch ID, your Apple Watch or a password.
• AppLocker, on the App Store: free to download with in-app purchases (subscriptions or lifetime access), macOS 11 or later. It asks for a password and, optionally, Touch ID.

Know what you're getting: a gate in front of the app, not a safe. A locker encrypts nothing, the app's data stays on disk as before, and the lock only exists while the locker is running. MakLock's own documentation lists an emergency key combination that removes its overlay, a safeguard against lockouts that anyone at the keyboard can use too. Against a curious colleague it works; against someone determined, a separate user account and FileVault are what hold.

A whole app: the Screen Time detour (macOS 14 to 26)

The only built-in detour, designed to limit time spent rather than to protect anything, is Screen Time. These steps are the ones Apple documents for macOS 14 to 26:

1. In System Settings › Screen Time, turn on Lock Screen Time Settings and choose a passcode.
2. Open App Limits, click Add Limit, select the app, and set one minute, Every Day.
3. Select Block at end of limit: after that minute, the app asks for the passcode.

The drawbacks are real: the first minute of each day stays open, and the passcode has four digits. On macOS 27, Apple's help no longer describes App Limits: Screen Time now works with Schedules and Time Allowances that apply to categories such as Entertainment, Games or Social Media, and blocking one specific app is only documented for a child's account in Family Sharing. The only real wall between two people sharing a Mac is still a separate user account.

Camera face recognition: convenience, not security

Several Mac apps offer to recognize your face with the FaceTime camera. They can be handy, but none of them can measure depth: they judge a two-dimensional image, and a photo or video of you is one too. "Anti-spoofing" models reduce the risk; they don't remove it.

Two reference points to put those promises in context. Android sorts biometrics into three classes; Class 2, formerly called "Weak", tolerates a spoof acceptance rate of 7 to 20% in testing and can't release keys that apps protect in the Keystore. That's the level the Sapphire app (free to download, macOS 14.6 or later) claims for its face unlock, according to its FAQ as of September 27, 2026. And Windows Hello only allows face recognition with an infrared camera: Microsoft explains that infrared doesn't show up in photos, which makes spoofing harder.

The right way to use it: keep passing eyes out, a colleague, a child, someone who sits at your desk for a minute. For anything that must stay secret, keep your password, Touch ID and FileVault.

Tack+'s Face Lock: what it protects, and what it doesn't

Tack+ tucks your Mac into a thin line at the edge of the screen: Messages, Mail, clipboard history, notes. Its Face Lock protects that panel, and only that panel: it doesn't lock the Messages app or any other app on your Mac.

• What it covers: the Whole panel, or Selected pages among Messages, Mail, Clipboard and Notes. Their home cards and search results stay veiled until you unlock.
• How: when the panel opens, the camera checks your face with Vision, Apple's on-device image analysis framework. No image is kept; your face print stays on this Mac, is never sent anywhere and isn't synced.
• The fallback: "Use Mac Password" opens the macOS prompt, which accepts your password or Touch ID. Nobody gets locked out.
• Relocking: instantly, or 1, 5 or 15 minutes after the panel closes, and as soon as the screen goes to sleep.
• Several faces: up to five Face Profiles (with or without glasses, or another person).

To turn it on: open the panel's Account page, then Face Lock › Set Up; click Add Profile and turn your head slowly in front of the camera. The lock is off by default, and the camera light only comes on during the check.

Tack+ says so itself in its settings: "Handy, not a vault: a photo can fool a camera." Face Lock is there so a colleague doesn't read your messages in the panel, not to guard secrets. On the privacy side, the panel's other sensitive pages are explained in our clipboard history guide and the clipboard manager comparison.

At a glance

Sources: Apple Support, About Face ID advanced technology, Touch ID & Password settings on Mac, Lock your notes on Mac and Set Screen Time Schedules and Time Allowances (macOS 27); Android documentation on biometric classes; the MakLock project page and the AppLocker App Store page; accessed September 27, 2026.