FaceGate

FaceGate locks individual Mac apps. When a locked app is opened, FaceGate holds it until you unlock with your face, Touch ID or a password. Face recognition runs on the Mac, and face embeddings are stored encrypted with the key in the Keychain. Up to three faces can be enrolled. Other options include session timers, locking when the Mac sleeps, scheduled locks and a menu bar control. It suits a shared Mac where particular apps should stay closed to other people.

FaceGate needs macOS 14.0 (Sonoma) or later, and a camera for face unlock. Touch ID is optional. The build is not notarized, so double-clicking the downloaded app does not open it; the README says to remove the quarantine attribute with xattr -cr /Applications/FaceGate.app, or to use its install script. The authors describe it as protection against casual physical access, not targeted attacks, because the built-in camera has no depth sensing. Apart from a daily update check, the app makes no network requests.