dweep-desai/FaceGate-Mac

What it solves

FaceGate provides application-level locking for macOS, filling a gap in the operating system's native capabilities. It allows users to restrict access to specific sensitive applications using biometric or password-based authentication, preventing unauthorized physical access to private data.

How it works

The app intercepts application launches in real-time and requires authentication before granting access. It uses a software-based face embedding pipeline that runs locally on the Mac via the Apple Neural Engine. To prevent spoofing (such as using a photo), it employs liveness detection through head-pose challenges. Users can also authenticate via Touch ID or an encrypted PIN stored in the macOS Keychain.

Who it’s for

Mac users (macOS 14.0+) who want an extra layer of security for individual apps and prefer a privacy-focused, on-device solution without cloud telemetry.

Highlights

• On-Device AI: Face recognition is processed entirely locally using the Apple Neural Engine.
• Liveness Detection: Prevents photo/video spoofing by requiring the user to tilt or turn their head.
• Flexible Authentication: Supports face unlock, Touch ID, and secure passwords.
• Granular Control: Includes per-app session timers, scheduled locking/unlocking, and lock-on-sleep functionality.
• Security Focused: AES-256-GCM encryption for face embeddings and zero telemetry.