Skip to content

Instantly share code, notes, and snippets.

@dmcbane

dmcbane/README.md

Last active October 29, 2025 06:09
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save dmcbane/3ce77630e5070dc87ce777fc71c1ea72 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save dmcbane/3ce77630e5070dc87ce777fc71c1ea72 to your computer and use it in GitHub Desktop.
Download ZIP
Setup Ubuntu for PIN login
Raw
README.md

Setup Ubuntu for PIN Login Instead of Long Password

  • Install packages if they aren't already installed.
sudo apt install libpam-pwdfile whois
  • Backup the Original PAM Configuration File
sudo cp /etc/pam.d/gdm-password /etc/pam.d/gdm-password_ORIGINAL
  • Create the Custom PIN File
echo "$(whoami):$(mkpasswd -5)" | sudo tee /etc/custompinfile
sudo chmod 400 /etc/custompinfile
  • Edit the PAM Configuration File to Enable the PIN file

Use your editor of choice with superuser privileges to edit the /ect/pam.d/gdm-password file to add auth sufficient pam_pwdfile.so pwdfile=/etc/custompinfile to the top of the file, similar to the following:

sudo vim /etc/pam.d/gdm-password

The top of your configuration file should look like the following:

#%PAM-1.0
auth    sufficient      pam_pwdfile.so  pwdfile=/etc/custompinfile
@looeee
Copy link

looeee commented Jul 20, 2025

After logging in with the pin, I get this screen (clicking cancel does nothing) and I have to enter the full password anyway.

image

@benjaminoakes
Copy link

benjaminoakes commented Jul 20, 2025

Yes, that happens on first login. Same as with fingerprint login. Unlocking the screen with PIN or fingerprint will not require unlocking the keyring.

So, after a reboot, log in with password. After locking the screen, use PIN or fingerprint.

@PaSSw0rds
Copy link

PaSSw0rds commented Aug 7, 2025

LGTM! You have saved my life!

@karolzlot
Copy link

karolzlot commented Sep 9, 2025

Does PIN require Enter to confirm when using this solution?

As asked in those places:

https://askubuntu.com/questions/1086514/how-to-make-ubuntu-immediately-login-when-i-finish-entering-my-pin-without-hitt

https://www.reddit.com/r/linuxmint/comments/p51sn2/login_without_hitting_enter/

@looeee
Copy link

looeee commented Sep 13, 2025

Does PIN require Enter to confirm when using this solution?

Yes

@looeee
Copy link

looeee commented Sep 30, 2025 •
edited
Loading

Unfortunately after several weeks of using this, I had to revert it. It doesn't work well with fscrypt encrypted folders or drives. I found myself jumping through all kinds of hoops to get it to work, and for safety decided that I should just go back to the main password rather than end up locking myself out.

I think it's safe to say that at this point, Ubuntu isn't designed to work with pin access for the initial login, and you should only use this on an intentionally insecure system without any encrypted files, stored credit card details, etc.

However, it might be possible to set things up so you enter the main password on the first login (after a reboot). This will unlock encrypted drives and keyring. Then use the pin screen lock only. I'll investigate this when I have more time.

@benjaminoakes
Copy link

benjaminoakes commented Oct 16, 2025

@looeee said:

However, it might be possible to set things up so you enter the main password on the first login (after a reboot). This will unlock encrypted drives and keyring. Then use the pin screen lock only. I'll investigate this when I have more time.

That's what I do (see above). I may have different needs than you, but I know I at least don't need to provide a password for the keyring if I first log in with a password and then use PIN/fingerprint to unlock the screen.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment