Self-host wlgblock
Wayland screen locker using a Gameboy Pokémon puzzle
- Stars
- 177
What is wlgblock?
A Wayland session locker that replaces password entry with a Gameboy puzzle. The lock screen runs a patched Pokémon Crystal ROM through the gbcc emulator, where users must enter specific Pokémon nicknames to unlock. It uses the ext-session-lock-v1 protocol for secure locking on compatible compositors like sway. The project builds a custom Wayland window with EGL and keyboard handling, avoiding toolkits such as SDL or GTK. The ROM patch adds assembly logic that sets a success flag when the correct nickname sequence is detected. Installation requires Nix and compiling the patched game from source. The software is experimental and not intended as a strong security boundary.
Should you self-host wlgblock?
wlgblock scores 34/100 on selfhost.directory (how scoring works) and ranks #72 of 78 in Security. It has 177 GitHub stars.
There was no stable release in the past 12 months, so check the repository's recent activity before you rely on it.
Setup is advanced: plan for several services and some ongoing maintenance. It is Other-licensed and written mostly in C.
Its closest alternative on selfhost.directory is pentagi (83/100, 32 639 stars). It scores higher overall, so compare the two before you pick. See wlgblock vs pentagi side by side.
Features
- Custom Wayland window
- Gameboy emulator integration
- Puzzle-based unlock
- Secure unlock protocol
- Wayland session locking
wlgblock README
More in Authentication
zitadelSelf-hosted open-source IAM stack: password, passkey and second-factor logins, external IdP brokering, OIDC/SAML tokens, on PostgreSQL with Docker or Kubernetes.
2faSelf-hosted, open-source TOTP/HOTP key manager that runs as a Cloudflare Worker: AES-GCM encrypted storage, QR import, PWA offline use, backups to WebDAV/S3/OneDrive.
2FAuthA self-hosted OTP manager for teams and individuals storing two-factor authentication codes with full data control.
389-ds-base389 Directory Server is a self-hosted, open-source LDAP server for identity management with multi-supplier replication, TLS/SASL auth, and Active Directory sync.
AgentSafeSelf-hosted gateway intercepting AI agent HTTP actions, asking Decionis for authorization, forwarding only approved requests with signed evidence.
ai-apiSelf-hosted AI gateway unifying Azure OpenAI, OpenAI, Anthropic, and Gemini behind one OpenAI-compatible API with revocable credentials and cost tracking.
AppwriteThe open-source cloud for agents & devs. Including Auth, Databases, Storage, Functions, Messaging, Hosting, Realtime, WAF and more
autenticoSelf-hosted OIDC identity provider as a single Go binary with SQLite, handling login, MFA, passkeys, sessions, and tokens with built-in admin UI.
autheliaSelf-hosted, open-source IAM portal providing single sign-on, multi-factor authentication and an OpenID Certified OpenID Connect provider for proxied apps.
authelia-adminSelf-hosted, open-source administration interface for Authelia authentication server, managing users, groups, TOTP devices, and banned IPs via LLDAP integration.
authentikSelf-hosted, open-source identity provider for SSO over OIDC, SAML, LDAP, RADIUS and SCIM, with TOTP and passkeys, configurable flows, RBAC and Helm or Compose installs.
authgearSelf-hosted open-source CIAM and identity provider, an Auth0/Clerk alternative with passkeys, MFA, SAML SSO and RBAC, deployed via Helm.
0 comments