pam_unix rejects empty passwords by default, so if hypridle locked the live session there was nothing the user could type to unlock it. Set allowNullPassword on the hyprlock PAM service so a bare Enter dismisses the locker, matching the empty live account passwords. Scoped to the live host so installed systems still reject empty unlocks. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>