Pre-order · New batch ships December 2026
immurok IK-1
US$69 Shipping calculated at checkout. Import duties not included.
One payment. No subscription, no account.
- One-year warranty
- Free firmware updates
- Secure checkout by Shopify
A standalone fingerprint key for your desk. One touch unlocks your Mac, Windows or Linux machine, approves sudo and admin prompts, signs SSH and Git, and unlocks 1Password or Bitwarden. Fingerprints stay on the key; nothing goes to a cloud.
Specifications
| Connectivity | Bluetooth LE, pairs with 2 computers |
| Sensor | Capacitive fingerprint, <500 ms match |
| Fingerprints | Up to 5 enrolled, matched on device |
| Battery | 110 mAh LiPo, USB-C, 1+ month per charge |
| Body | CNC aluminum, anodized |
| Size | 44 × 44 × 14.2 mm, ~40 g |
| Works with | macOS 13+, Windows 10/11, major Linux distros |
| Security | ECDH P-256 pairing, HMAC-signed events, signed firmware |
What's in the box
- immurok IK-1, Silver
- User manual
Import duties, VAT and any local customs charges are the recipient's responsibility. Already ordered? Check your order status.
What one touch does
- Screen unlock. Lock screen, touch, unlocked. On a Mac mini, an iMac, a closed MacBook, a Windows desktop or a Linux box.
- sudo and admin prompts. A PAM module on macOS and Linux and a Credential Provider on Windows turn the password prompt into a fingerprint prompt.
- SSH and Git signing. The key holds an ECDSA P-256 private key that never leaves the hardware. Push commits and open SSH sessions with a touch.
- Password managers. Unlock 1Password, Bitwarden, LastPass or Proton Pass with a dedicated password stored on the key, separate from your login password.
- TOTP codes. Keep two-factor seeds on the key instead of in an app on the computer.
- AI coding agents. Wrap a privileged command in
imk run --agent --and the agent has to wait for your finger. How the gate works. - Two computers. Bind the key to a desk Mac and a work laptop. One dedicated finger switches between them.
Compatibility
The key is a separate Bluetooth LE device, so it does not care what keyboard you use or whether your machine has a built-in sensor.
| Platform | Requirement | How it plugs in |
|---|---|---|
| macOS | 13.0 or later, Apple Silicon or Intel | Menu bar app + PAM module. Mac mini and desktop Macs |
| Windows | Windows 10 or 11, x64 or Arm64 | Service + Credential Provider on the sign-in screen. Windows details |
| Linux | Debian 12+, Ubuntu 24.04+, Fedora 43+, Arch; GNOME or KDE | Rust daemon + PAM and polkit. Linux details |
Not supported: ChromeOS, and websites that want a passkey or FIDO key. immurok works one layer down, on the machine in front of you. See immurok vs YubiKey.
Shipping, cancellation and returns
- Pre-orders ship in December 2026. You get an email when your order ships, and you can cancel for a full refund at any time before then.
- Orders ship from China with tracking. The shipping rate and the estimated delivery time for your country are shown in the order panel before you pay.
- Orders ship DDU: import duties, VAT and customs fees, where they apply, are collected by your local customs or carrier on delivery. For a few destinations the tax is already included in the shipping price, and that is marked.
- Devices that arrive damaged or faulty can be returned within 7 days of delivery for a replacement or a full refund; we cover the return shipping. Change-of-mind returns are not accepted.
- Every key carries a one-year limited warranty against defects. Full text: shipping policy, refund policy.
Security in one paragraph
Fingerprint templates are stored and matched on the key. What crosses Bluetooth is an HMAC-signed “match succeeded” notification, never the fingerprint. Pairing is a direct ECDH P-256 exchange between the key and your computer. Firmware updates are signed with ECDSA and the key refuses downgrades. Opening the case of a paired key trips a tamper switch that wipes it. There is no account, no server and no telemetry. The security model and the firmware verification pipeline are written up in full.
Questions before you order
When will my pre-order ship?
The current batch ships in December 2026. We email you when it leaves the warehouse, with a tracking number. If the date moves we email you too, and you can cancel for a full refund at any point before shipping.
Do I need the app, and does it cost anything?
Yes, and no. The key pairs with a companion app on macOS, Windows or Linux, included with the key, which handles pairing, fingerprint enrolment and the integrations. There is no subscription for anything.
Can one key be used on two computers?
Yes, on up to two, connected to one at a time. Each computer gets its own pairing. You enrol one finger as the switch finger, and touching it moves the key to the other machine, which reconnects on its own.
Does it charge over USB-C, and can it work wired?
It charges over USB-C, and only charges. The port carries no data. Everything, including pairing and fingerprint results, goes over Bluetooth LE, so your computer needs Bluetooth and the key needs no free port while you work.
Which countries do you ship to?
The countries in the Ship to list of the order panel. Pick yours there to see the shipping price and delivery estimate before checkout. If your country is not listed, we cannot deliver there yet.
Ships December 2026. Cancel any time before shipping.