Enable Fingerprint Login on Your Lenovo ThinkPad in Ubuntu 24.04

Fingerprint login feels like magic when it works. Touch the sensor, and your ThinkPad unlocks. No typing a long password every time you open the lid. On Ubuntu 24.04, most modern Lenovo ThinkPads can do this — you just need to enroll your fingerprint the right way.

Many users assume Linux does not support their sensor. In reality, Ubuntu ships with the needed software — the sensor is often ready, just not set up. This guide covers checking support to logging in with your finger.

Quick Answer

To enable fingerprint login on a Lenovo ThinkPad in Ubuntu 24.04, install fprintd and libpam-fprintd, enroll your finger with fprintd-enroll or in Settings > Users, then enable fingerprint authentication with sudo pam-auth-update. Restart, and you can log in and unlock with the fingerprint sensor if your ThinkPad model has a Linux-supported reader, as most T14, T16, X1 Carbon, and P-series models from recent years do.

Which ThinkPad Fingerprint Readers Work on Linux?

Lenovo uses readers from several makers, mainly Synaptics, Goodix, and Elan, integrated into the power button or beside the keyboard. Support depends on the exact sensor, not just the laptop name.

Generally, ThinkPad T480 and newer, T14 Gen 1 through Gen 5, X1 Carbon Gen 6 and newer, X13, and P14s have good support through the libfprint project. Some very new sensors and a few Goodix models are still unsupported. ThinkPads are among the best laptops for this because Lenovo officially supports Ubuntu on many models.

The work is maintained by the fprint project on freedesktop.org, which provides both libfprint drivers and the fprintd service Ubuntu uses. Check their supported devices list if your sensor is not detected.

Step 1: Check If Ubuntu Sees Your Fingerprint Sensor

1. Open a terminal with Ctrl + Alt + T.
2. Run lsusb and look for a line mentioning Fingerprint, Synaptics, Goodix, or Elan with a device ID like 06cb:00bd.
3. Install the tools if missing: sudo apt update && sudo apt install fprintd libpam-fprintd
4. Run fprintd-list $(whoami) — if it lists a device, your sensor is detected.
5. If it says “No devices available”, run systemctl status fprintd to check the service, and reboot once before giving up.

No device listed after reboot usually means an unsupported sensor or a sensor disabled in BIOS. Check BIOS next before deeper debugging.

Step 2: Make Sure the Sensor Is Enabled in BIOS

1. Restart the ThinkPad and press F1 at the Lenovo logo to enter BIOS Setup.
2. Go to Security > Fingerprint.
3. Make sure the Fingerprint Reader is set to Enabled.
4. If you previously used fingerprint only in Windows with pre-boot data, choose Reset Fingerprint Data once — this clears old templates that can block Linux enrollment. Note: this also removes Windows Hello fingerprints, which you can re-enroll later.
5. Save with F10 and boot into Ubuntu.

For standard Ubuntu packages, Secure Boot can stay on.

Step 3: Enroll Your Fingerprint — Settings Method

The graphical method is easiest and best for most users on Ubuntu 24.04 with GNOME.

1. Open Settings > Users and unlock with your password using the Unlock button.
2. Click on your account, then select Fingerprint Login.
3. Click the plus or Add Fingerprint option and follow the prompts.
4. Place your finger on the sensor, lift, and repeat — slightly move the angle each time as shown, until the progress completes. Enrolling the index finger of your dominant hand is most convenient.
5. Name the fingerprint if prompted and click Done.
6. Enroll a second finger as backup. A cut or bandage on one finger should not lock you out of convenience login.

Our general setup walkthrough on how to set up Ubuntu 24.04 after a fresh install pairs well with this step if you are configuring a new ThinkPad.

Step 4: Enroll from the Terminal (Useful for Troubleshooting)

If Settings does not show Fingerprint Login, the terminal method gives clearer errors.

1. Run fprintd-enroll in the terminal.
2. Touch the sensor repeatedly when prompted — you will see messages like “Enroll Stage Passed”.
3. After about 5 to 8 successful touches, it will say enrollment completed.
4. Verify with fprintd-verify and touch the sensor again. It should report a match.
5. To enroll a specific finger, use fprintd-enroll -f right-index-finger or -f left-thumb as needed.
6. To delete all prints for your user later, use fprintd-delete $(whoami).

If enrollment fails halfway with a disconnect error, close other apps using the sensor, restart the service with sudo systemctl restart fprintd, and try again with a clean, dry finger. Moisture is the most common cause of failed scans.

Step 5: Enable Fingerprint for Login, Unlock, and Sudo

Enrolling alone does not always turn on every prompt. Enable the PAM module so Ubuntu actually asks for your finger.

1. Run sudo pam-auth-update in a terminal.
2. Use arrow keys and Space to enable “Fingerprint authentication”, then Tab to OK and press Enter.
3. Lock your screen with Super + L and test unlock with your fingerprint.
4. Log out fully and test login from the main screen.
5. Test sudo: open a new terminal and run sudo true — it should prompt for fingerprint first, with password as fallback after a timeout or by pressing Ctrl + C.

The Ubuntu documentation on authentication and passwords explains how login methods fit together. On Ubuntu 24.04, GDM login and unlock work well on supported ThinkPads. First login after boot may still need a password for your keyring — normal behavior, explained below.

Why You Still Need Your Password Sometimes

New users are confused when fingerprint works for unlock but not for the very first login after shutdown. This is by design.

• The GNOME keyring that stores Wi-Fi and app secrets is encrypted with your password. Only your typed password can unlock it on first login.
• After that first unlock, fingerprint handles screen unlock, sudo, and app prompts for the rest of the session.
• Full-disk encryption at the very start — the LUKS passphrase before Ubuntu loads — cannot use fingerprint on standard Ubuntu installs. Type that passphrase, then use fingerprint afterwards.

Your setup is not broken if boot login asks for a password once.

Troubleshooting: Sensor Detected but Login Does Not Prompt

Fingerprint Works for Sudo but Not at Login Screen

1. Confirm GDM is your display manager with cat /etc/X11/default-display-manager.
2. Re-run sudo pam-auth-update and ensure fingerprint is enabled.
3. Check that /etc/pam.d/gdm-password includes fprint lines — reinstall with sudo apt install --reinstall libpam-fprintd if missing.
4. Reboot completely — lock and unlock testing is not enough for login screen changes.

Sensor Stopped Working After an Update or Windows Boot

1. Power off fully, wait 10 seconds, and power on. A cold boot resets the sensor’s USB state better than a warm restart, especially after Windows firmware handoff.
2. In Windows, disable Fast Startup if you dual boot. Fast Startup leaves hardware in a saved state that Linux cannot always claim.
3. Delete and re-enroll fingerprints in Ubuntu if verify suddenly fails for all fingers.
4. Check for a firmware update in Software > Updates or with fwupdmgr get-devices and fwupdmgr update — Lenovo publishes ThinkPad fingerprint firmware through LVFS for many models.

Common Mistakes and Useful Tips

• Enrolling too quickly with the same angle: Vary the position slightly each touch. A template built from one tiny spot fails often in daily use.
• Wet, dirty, or very dry fingers: Clean the sensor and your finger. In winter, dry skin scans poorly — enrolling again in normal conditions helps.
• Expecting fingerprint for disk encryption: The LUKS prompt appears before fprintd runs. No setting in Ubuntu changes that on a standard install.
• Deleting your only password: Never remove password login. Fingerprint is a convenience layer — the password remains your recovery method.
• Resetting fingerprint data in BIOS without knowing the effect: It wipes Windows Hello prints too. Plan to re-enroll in both systems.
• Tip: Enroll the same finger twice as two separate entries if you get frequent no-match results. It noticeably improves success on some Synaptics sensors.
• Tip: Name your ThinkPad’s sensor position — power-button sensors need a full fingertip press, not a swipe. Press flat for a full second instead of tapping quickly.

Conclusion

Enabling fingerprint login on a Lenovo ThinkPad with Ubuntu 24.04 takes about five minutes when the sensor is supported: check detection, confirm BIOS, enroll in Settings or with fprintd-enroll, and enable PAM authentication. You will still type your password for the first login and disk unlock, but every unlock and sudo prompt after that becomes a simple touch. It is one of the best quality-of-life upgrades for a ThinkPad running Ubuntu.

Frequently Asked Questions

How do I know if my exact ThinkPad sensor is supported?

Run lsusb to get the sensor’s vendor and product ID, then check it against the fprint project’s supported devices list. If fprintd-list shows your device in Ubuntu, it is supported regardless of lists — that live detection test is the final proof.

Can I use fingerprint instead of my password completely?

No, and you should not try to. Ubuntu requires your password for first login after boot to unlock the keyring, for disk encryption, and as a fallback if the sensor fails. Think of fingerprint as a fast shortcut layered on top of your password, not a replacement.

Does fingerprint login work on the lock screen and for sudo?

Yes, on Ubuntu 24.04 after enabling fingerprint in pam-auth-update, it works for screen unlock, the login screen after a prior session login, software installs, and sudo in the terminal. Watch for the fingerprint prompt text — you may need to touch the sensor even when the password box is also visible.

I dual boot Windows. Will enrolling on Ubuntu delete my Windows Hello fingerprint?

Normal enrollment in Ubuntu does not delete Windows prints, as modern sensors store multiple templates separately. Only the explicit BIOS “Reset Fingerprint Data” option wipes all templates for all systems. Avoid that option unless troubleshooting requires it.

What should I do if Fingerprint Login is missing in Settings?

Install fprintd and libpam-fprintd, reboot, and check again. If it is still missing, test fprintd-list $(whoami) in a terminal. No listed device means BIOS is disabled or the sensor is unsupported, and the Settings entry correctly hides itself.