Install

Install pulls binaries from this project's official instance at https://pairfob.com/dl. curl is required. macOS and Linux. Windows is rejected.

curl -fsSL https://pairfob.com/install.sh | sh

The same command on a second computer. Then pair it from the phone: Settings → Switch computer → Add a computer. Do not set PAIRFOB_JOIN_TOKEN.

Herdr checks and installation

Before replacing Pairfob, enrolling, or installing its service, the installer checks Herdr. It reuses a ready server, starts an installed server when needed, and waits for its API. If Herdr is missing, it asks in the terminal before installing pinned version 0.8.2 into ~/.local/bin/herdr, with SHA-256 verification and without replacing an existing Herdr.

For unattended installation, explicitly allow the missing dependency:

curl -fsSL https://pairfob.com/install.sh | sh -s -- --install-herdr --non-interactive

--non-interactive never prompts and fails when Herdr is missing unless --install-herdr is also set. --skip-herdr-check installs Pairfob without claiming session readiness. --no-service still checks Herdr; for offline preparation use --no-service --no-enroll --skip-herdr-check.

Later, run pairfob setup to check and start Herdr, or pairfob setup --install-herdr to install a missing dependency. pairfob doctor only diagnoses; it never installs or starts anything. Incompatible protocols, startup failures, and invalid HERDR_BIN or socket settings must be resolved before continuing. Existing Herdr sessions are never automatically upgraded or restarted. Pairfob starts only the default server; with PAIRFOB_HERDR_AUTOSTART=0, start the configured Herdr server yourself. See Named Herdr sessions for the autostart limits.

What the script does

1. Downloads the pairfob binary for this OS
2. Verifies the checksum and refuses to overwrite on mismatch
3. Checks Herdr, optionally installs it with consent, starts it if needed, and verifies its API
4. Enrolls
5. Unless --no-service, installs a user-level login service

Flags

Flag	Role
--prefix DIR	Install directory. A writable /usr/local/bin uses that; otherwise ~/.local/bin
--no-service	Binary and enroll only; no login service
--no-enroll	Skip enrollment; service and Herdr checks still apply
--install-herdr	Install pinned Herdr if missing, without prompting
--non-interactive	Never prompt; missing dependencies fail unless installation is allowed
--skip-herdr-check	Skip Herdr checks without claiming session readiness

Also valid:

curl -fsSL https://pairfob.com/install.sh | sh -s -- --prefix "$HOME/bin"

Machines that already enrolled: rerunning the installer refreshes the binary and leaves existing pairings alone.

The service retains the checked Herdr executable, socket, configuration paths, and startup options so a different login PATH does not break the connection.

The installer checks and starts Herdr from the home directory, matching the login service. Relative Herdr configuration paths are also interpreted from home.

Where it lands

Condition	Binary
Writable /usr/local/bin	Default /usr/local/bin/pairfob
Ordinary user	Default ~/.local/bin/pairfob

pairfob is the command shown in this documentation. The installer also creates pairfobd → pairfob in the same directory as a compatibility alias.

If ~/.local/bin is not on PATH, the script tells you to add it. For zsh:

echo 'export PATH="$HOME/.local/bin:$PATH"' >> ~/.zshrc
source ~/.zshrc

After install

After a login, the service starts on its own. It is a login service, not a boot daemon: sleep and logout stop it; coming back to the same graphical session starts it again. In the current graphical session you can run pairfob in a terminal, or:

pairfob service status
pairfob service restart

Day to day you should not need those. pairfob update replaces the binary and restarts an installed user service.

Update

pairfob update

Replaces the binary and restarts the user service. Do not rerun the installer as an “update”.

Uninstall

pairfob service uninstall
prefix="$(dirname "$(command -v pairfob)")"
rm -f "$prefix/pairfob" "$prefix/pairfobd"

Uninstalling the service does not delete the state directory. To drop pairings too, remove ~/.config/pairfob after you are sure you do not need those device credentials.

From source

Clone the repository for local comparison. Herdr still needs to be installed. Everyday use still follows the install command above.

go run ./cmd/pairfob

Local pairing and checks are in the repository README.