Heads
Fewer than 5 people recommend it so far, so there's no written verdict. Here is what commenters said.
4recommend
1warn against
Jan 28, 2026first mention
Oct 24, 2026latest mention
Why people recommend it
“Look at the heads project”
“There are very few machines that are capable of running Heads”
Show 3 more
“I use Heads with a hardware key to defend myself from an Evil Maid.”
“I layed down the tooling for anyone wanting to further protection”
“Heads is updated regularly: https://github.com/linuxboot/heads/”
Caveats and dissent
“I wouldn't call heads "best approach on what is available"”
Often compared with
From the makers not counted in the ranking
“This relates to work I've been doing with the [Heads](https://osresearch.net/) project.”
contributes ports to Headson “Libreboot 26.10 "Ominous Olive" released with UEFI, …”
Threads where it came up
- F-Droid Board of Directors nominations 2026 3 mentions
- Original GrapheneOS responses to WIRED fact checker 2 mentions
- Full Disk Encryption on Fedora with TPM2 1 mention
- Libreboot 26.10 "Ominous Olive" released with UEFI, Chromebook support 1 mention
- GrapheneOS has fixed the Android 17 QPR1 kernel performance regression 1 mention
- Update Your Secure Boot Cert Before It Expires 1 mention
Data: heads.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 11
“Look at the heads project”
“My Qubes laptop runs coreboot with Heads”
“There are very few machines that are capable of running Heads”
“I use Heads with a hardware key to defend myself from an Evil Maid.”
“I wouldn't call heads "best approach on what is available"”
“I layed down the tooling for anyone wanting to further protection”
“Heads is updated regularly: https://github.com/linuxboot/heads/”
“Heads + TPM is solid but I suspect it is not at the level of Google/Apple secure enclave.”
“I use Qubes with TPM and Heads”
It replaces a proprietary component of your system with an open source one. Reading https://libreboot.org/#why-use-libreboot might provide further enlightenment.
“It works well with Qubes btw, and is recommended by the developers”