Security

Last updated 2026-11-04

Lunhand lets an AI agent use the apps on your Mac, including while the Mac is locked and you are away. That is a powerful thing to install, so this page explains exactly what it does.

What Lunhand can do

• Read what is on screen and in app windows, and click, type and scroll in them — only on the Mac where it is installed, and only after you grant the Accessibility and Screen Recording permissions.
• Continue the tasks your agent was given while the Mac is locked — only if you also install the lock-screen part, which asks for your admin password.

What Lunhand cannot do

• It cannot unlock any other Mac, phone or device, and it cannot remove an Apple ID or iCloud lock.
• It does not touch the first login after your Mac starts up. A Mac that has just been turned on still needs your password.
• It never learns or stores your password. Your password and Touch ID keep working exactly as before.

How the locked-Mac part works

1. When you install it, Lunhand adds a login plugin to macOS and one extra option to the screen-unlock rule. The original rule is backed up first.
2. When your agent needs an app while the Mac is locked, the Lunhand app wakes the screen. The lock screen asks the plugin, and the plugin agrees only if the request comes from the Lunhand app installed in the Applications folder, running as the logged-in user, with a valid code signature.
3. Before anything else, a full-screen cover (99% opaque) goes up. It shows “Lunhand is working” and the time the work started.
4. If a person touches the keyboard, mouse or trackpad while the cover is up, Lunhand blocks that input and locks the Mac within 0.13 seconds. It then waits for five quiet minutes before it tries again.
5. When the work is done, Lunhand locks the Mac again. With several sessions, it waits for the last one to finish.

Things you should know

Any program that runs under your macOS account can ask Lunhand to act, including continuing work while the Mac is locked. Other computer-use tools that work on a locked Mac have the same property. Install Lunhand only on a Mac you own, in a place you trust, where you trust the software you run.

What stays on your Mac

• Lunhand does not send your screen, keystrokes, clipboard or files to us. Screenshots and accessibility information go only to the AI agent you connect to it on your Mac, such as Claude Code. How that agent's provider handles them is governed by its own terms.
• Lunhand watches input only to tell whether a person touched the Mac. It does not record what you type.
• Its log stays on your Mac and holds times, lock and unlock events, which tool ran and any errors. You can delete it at any time.

Turning it off

• You can remove the lock-screen part at any time. Removing it puts the original unlock rule back from the backup.
• If the lock screen ever behaves oddly, your password and Touch ID still work. In the worst case, restart and log in as usual, then remove the lock-screen part.

Reporting a problem

If you find a security problem, please tell us at our support email (coming soon) before sharing it publicly.