Skip to content

Instantly share code, notes, and snippets.

@dmcbane
Last active October 29, 2025 06:09
Show Gist options
  • Select an option

  • Save dmcbane/3ce77630e5070dc87ce777fc71c1ea72 to your computer and use it in GitHub Desktop.

Select an option

Save dmcbane/3ce77630e5070dc87ce777fc71c1ea72 to your computer and use it in GitHub Desktop.
Setup Ubuntu for PIN login

Setup Ubuntu for PIN Login Instead of Long Password

  • Install packages if they aren't already installed.
sudo apt install libpam-pwdfile whois
  • Backup the Original PAM Configuration File
sudo cp /etc/pam.d/gdm-password /etc/pam.d/gdm-password_ORIGINAL
  • Create the Custom PIN File
echo "$(whoami):$(mkpasswd -5)" | sudo tee /etc/custompinfile
sudo chmod 400 /etc/custompinfile
  • Edit the PAM Configuration File to Enable the PIN file

Use your editor of choice with superuser privileges to edit the /ect/pam.d/gdm-password file to add auth sufficient pam_pwdfile.so pwdfile=/etc/custompinfile to the top of the file, similar to the following:

sudo vim /etc/pam.d/gdm-password

The top of your configuration file should look like the following:

#%PAM-1.0
auth    sufficient      pam_pwdfile.so  pwdfile=/etc/custompinfile
@benjaminoakes
Copy link

@looeee said:

However, it might be possible to set things up so you enter the main password on the first login (after a reboot). This will unlock encrypted drives and keyring. Then use the pin screen lock only. I'll investigate this when I have more time.

That's what I do (see above). I may have different needs than you, but I know I at least don't need to provide a password for the keyring if I first log in with a password and then use PIN/fingerprint to unlock the screen.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment