How Do I Get Back In? Every Way to Unlock a Mac Locked With VibeLock, From Touch ID to the Emergency Escape

The question people ask before they buy a keyboard lock is not "how does it lock?" but "how do I get back in?". It is the right question. An app that blocks every key and click on your Mac has, by definition, also blocked the keys you would use to quit it, and if the unlock path has a hole in it you are rebooting a machine with an agent run half-finished. This post walks through every way back into a Mac that VibeLock has locked: the normal Touch ID path, the password fallback, what happens when Touch ID fails or hangs, the documented emergency escape, and the two things that will always work because macOS owns them.

The normal path: press anything, then Touch ID

While locked, VibeLock swallows every key press and click before any app sees it. The first one does one extra thing: it raises the unlock shield, a full-screen window on every display, 98% opaque so nothing behind it can be read. You can also open the shield from the menu bar icon, whose only option while locked is "Unlock…".

On a Mac with Touch ID, the shield asks macOS for a biometrics-only check through the system's LocalAuthentication framework. The fingerprint prompt you see is the operating system's, not VibeLock's; the app never sees fingerprint data and only receives a yes or a no. Touch the sensor and, on a yes, VibeLock removes its input tap, drops the shield and the backdrop, releases the "keep the display awake" assertion and unhides every app it hid. The whole thing takes about as long as unlocking the Mac from the login screen.

When Touch ID fails, is cancelled or does not exist

Cancel the Touch ID prompt, fail it, or use a Mac without a sensor (a Mac mini or Mac Studio with a non-Touch-ID keyboard, or a MacBook in clamshell mode with the lid shut), and the shield shows a password field. Type your normal Mac login password, the one you use at the login screen. VibeLock checks it locally against your macOS user account through OpenDirectory. The password is never stored, logged or sent anywhere; the app contains no networking code at all.

Two details matter here. The password field is on the shield, and the shield deliberately lets keys and clicks through to itself so you can type, while still blocking ⌘Tab, ⌘` and the Spaces and Mission Control shortcuts so focus cannot be moved away from it. And there is a rate limit: after every five wrong passwords, the field locks for 30 seconds. If you type with a non-English keyboard layout, remember that the layout active on the shield is whatever macOS has selected; a password that works at the login screen works here.

Touch ID hangs: the 45-second watchdog

macOS occasionally leaves a Touch ID dialog in limbo. VibeLock plans for this in two ways. While a Touch ID prompt is up, the shield is lowered to a normal floating window level for up to 45 seconds, so the system dialog can never end up stuck underneath it. And a 45-second watchdog resets the prompt if it hangs, after which you get the password field. During that window the Dock and menu bar may be reachable, which is why a blocked app opened from the Dock in that moment is hidden again by the normal rules. If you ever see a frozen fingerprint dialog, wait; it clears itself.

Esc: back to watch-only, not out

Pressing Esc on the shield dismisses it and returns to the locked, watch-only view with your visible apps on screen. It does not unlock anything; it is for the case where you bumped the keyboard and want the terminal back in view without authenticating. One exception: if a blocked app's fullscreen window is on the current Space, the shield stays, because that window cannot be hidden without tearing down its Space and the shield is what covers it.

The emergency escape: SSH from another device

VibeLock is explicit that remote access is outside what it blocks: anyone who can SSH into or remotely control your Mac can end the process. The documentation lists that as the emergency escape, and it is worth setting up before you need it. With Remote Login enabled in System Settings, from your phone or another computer on the same network:

ssh you@your-mac
killall VibeLock

The input block is released instantly, the hidden apps come back and your agent run is untouched. This is the answer to "what if the app crashes while locked?": a crash ends the process the same way, and macOS removes a dead process's event tap, so a crash cannot leave the keyboard locked. The failure mode VibeLock guards against is the opposite one, macOS silently disabling the tap because it judged it slow, which a watchdog re-arms every two seconds.

The two exits macOS always keeps

A short press of the power button (or the Touch ID button) sleeps or locks the Mac at the system level, and a long press forces a shutdown. VibeLock does not and cannot intercept these; they arrive as system-defined events outside its tap. Both end at the real macOS login screen, so your data stays behind your account password. The difference is what happens to the running session: sleep or lock keeps it, a forced shutdown ends it, and your agent with it. If you are locked out and the SSH route is not available, a short press and a normal login is the safe choice; the long press is the last resort.

Closing the lid is similar: VibeLock keeps the display awake but does not override lid-close sleep, so shutting a MacBook puts it to sleep and you are back at the login screen on waking. That is fine for an escape and bad for a long run, which is why the overnight checklist says to leave the lid open or use clamshell mode with power and a display.

What an unlock does not undo

Unlocking removes the input tap, the shield and the desktop backdrop and unhides the apps VibeLock hid. It does not quit anything, including VibeLock, which stays in the menu bar ready for the next lock. It leaves your Visible and Accessible app lists as they were. And it writes one line to ~/Library/Logs/VibeLock.log saying whether the unlock attempt succeeded or failed, with the time, never the password. That log is yours to delete, and it is the first place to look if you come back to find the Mac unlocked and want to know when it happened.

A sensible setup, in order

1. Enrol Touch ID if your Mac has it, so the everyday unlock is a fingerprint and the password field is the exception.
2. Make sure you can type your login password: the password is the fallback, and a password you only ever autofill is a password you will mistype five times at 11pm.
3. Turn on Remote Login once, and test ssh you@your-mac from your phone while unlocked, so the emergency route is known to work.
4. Decide what you want to happen on a power-button press (sleep is the default) and know that a long press is a shutdown.
5. Lock, press a key, cancel Touch ID, type the password, and watch the unlock happen once, deliberately, before you rely on it.

VibeLock is a $10 one-time purchase for macOS 13 Ventura or later, signed and notarized, and needs only the Accessibility permission. It is built for the ten-minute absence, not the overnight attacker; for the latter the real login screen (⌃⌘Q) remains the right tool, and the security model page lists everything the lock does and does not block.