Omarchy: Exposed

Checked 13 October 2026

Claims

Every line in the middle column is a sentence the project published. The right column is the document that sits next to it. The left column is the verdict.

Verdict They published The record
FALSE "We can fix everything." The homepage says Omarchy "solves all of it": setup, debugging, and the confusing choices. Omarchy 4.0.0 shipped. On 25 August 2026, 4.0.1 shipped eleven security fixes. A video title could become a shell command. A notification click ran a shell string. A USB device name was executed as Hyprland Lua. An installed theme could run code. The default user was in the docker group, which on this setup meant root. The doctrine's own line is "We're not there yet." Details are on the security page.
NUANCED "Beautiful, fun & agentic Linux." The README calls Omarchy a Linux distribution by DHH. It has an ISO, an installer, and its own package repository, which is what people mean by a distribution. An archived copy of the repository, from when it lived at basecamp/omarchy, used the description "Opinionated Arch/Hyprland Setup." On 3 September 2026 DHH wrote that early critics who called it "a bunch of dotfiles" were not entirely wrong "at the time." Underneath, it is Arch: Arch's kernel line, pacman, and Arch's core, extra, and multilib repositories. The manual says so: "Arch, the underlying distro that Omarchy is built on." "Beautiful" and "fun" are taste. "Agentic" is a real integration, and the security page is what that integration shipped with.
NUANCED "Be up and running in as little as 35 seconds on the fastest machines, and in less than two minutes on the majority of computers." "Under a minute from stick to desktop." "As little as" is a floor, so a fast machine can make the number true without the number describing a typical install. This page has no independent stopwatch for the 4.0.4 ISO. A long review of the 3.0.2 ISO, by Marius, found a 6.2 GB image that then downloaded another 1.8 GB on first boot. The official Arch install image he compared it with was 1.4 GB. "Stick to desktop" is the installer finishing. It is the moment before the first update, before Hyprland's keybindings, and before the agent the homepage says will debug whatever is left.
FALSE "Agents that debug all issues." "When you can vibe code whatever app comes to your mind, you should be able to vibe code your operating system." Agents are installed and wired to the menu. "All issues" is the part that fails. The manual says those launches "run unattended in their respective don’t-stop-to-ask modes, so be ready for them to actually do things." Until 15 August 2026 the menu launched Claude Code with --permission-mode bypassPermissions and Codex with --dangerously-bypass-approvals-and-sandbox. DHH's pull request changing that says Codex's own help text reserves the bypass flag for externally sandboxed environments. The same commit leaves Grok on bypassPermissions. On 3 September 2026 he wrote that Quattro "has almost exclusively been built by agents" because they are "incredibly good at stuff like bash." The bash those agents were good at is the bash in the 4.0.1 security list.
FALSE "Omarchy takes security extremely seriously." Losing a laptop "can’t lead to a security emergency." Full-disk encryption is real, and it is one of five items in that chapter. The others are a firewall that leaves LocalSend's port 53317 open, Arch's rolling updates, an Omarchy package mirror, and Cloudflare in front of the ISO and package hosts. Cloudflare answers a question about the download site staying online. Rolling updates did not write the shell scripts. The same page then documents passwordless sudo, "most often when an AI agent is doing a long stretch of system work," for 15 minutes by default and up to 1,440 minutes. "While it’s on, anything running as your user can do anything as root without being asked. That’s the whole point, and it’s also the whole risk." The 4.0.1 list is the rest of the answer.
NUANCED "Own the machine." "No tollbooths, no gatekeepers, no platforms that can change the terms on you." "Just free and open code." The code is MIT. That half is true. The doctrine, a few sections earlier, says "Omarchy is not a democracy. It's a benevolent dictatorship." The Omacom Foundation holds the trademarks. Patronage, in the project's own posts, buys recognition. The dictator's job, in the doctrine's words, is to "make the call according to their intuition, vision, and experience." The code is open. The name, the defaults, and the call are not a commons.
NUANCED "Dropping the Code-of-Conduct struggle sessions and identity-overload nonsense." "Just be nice and sincere." The project has no code of conduct. That half matches the doctrine. It does have a written rule that one person decides. "Nice and sincere" is the replacement standard they offer. The record page is what the founder's own posts have looked like since 2021, and what the Basecamp policy he and Jason Fried imposed on employees looked like.
MISLEADING "1,269,158 ISO downloads in year one," placed under "Momentum by the numbers" beside the pledge total and the GitHub star count (44,677 on the homepage the day this page was written). The homepage does use the words "ISO downloads." This page has not audited the counter. On 3 September 2026 the token announcement said the project had "attracted hundreds of thousands of users and cocreators." A download counts a person who fetched the file, a person who fetched it twice, a failed install, a mirror sync, and a curious click. The project has not published completed installs or daily machines next to the download figure. The noun is accurate. The block it sits in treats a file transfer as adoption.
TRUE "From billionaires to anons on X." The homepage section is "Backed by the oligarchy. The billionaires, mere millionaires, and corporations funding the lion's share." They published the boast, and the patron page matches it. The doctrine links the word "billionaires" to oligarchy.fyi, a page whose entire text is "Elite capital. Public code." The patrons page repeats that line under DHH's portrait. The roster and the arithmetic are on the money page.
NUANCED "Developed by developers for developers." Neovim is the default. Rails is a menu item. Neovim, a tiling compositor, and an agent menu are a developer setup, and that half is real. Marius's review of a 3.x install also found Chromium with Google as the search engine, no ad blocker, and a launcher full of menu entries that open websites: Basecamp, HEY, X, ChatGPT, Spotify, and others. Ruby on Rails was not installed. The menu path was Install, Development, Ruby on Rails, and the script used mise to fetch the toolchain. The creator of Rails shipped his own commercial products as default icons and left the language runtime as an extra. Some of the app list has moved since that review. The commercial-apps and web-apps chapters are still in the manual.
NUANCED Plugins: "Thousands of community plugins." "Don't find what you need? Just put your agent on the job, then share when done." Their own hiring post later said the catalogue was close to three thousand, so "thousands" matches a number they published. This page has not counted the directory. The plugin directory's own terms say third-party plugins "run as unsandboxed code" and that automated checks "are not a security audit or guarantee." Until 4.0.1, installing a theme could run code. The agent invited to write the next plugin is the same agent the manual launches in a don't-stop-to-ask mode.

What the installer will accept

The script install/config/increase-sudo-tries.sh is in the repository with this comment: "Give the user 10 instead of 3 tries to fat finger their password before lockout." It writes Defaults passwd_tries=10 and sets faillock deny = 10. DHH closed a related issue in February 2026 confirming the ten-try policy. Ten guesses is a convenience for a mistyped password. It is also the policy on the lock screen of a laptop the manual says you can lose without a security emergency.

Marius, installing 3.0.2, set the account password and the disk-encryption passphrase to the word install. The installer accepted it. This page does not claim the 4.0.4 installer still accepts that word. It claims a released installer, for a system advertised as serious about security, did.

The unattended-install chapter tells an operator to put the disk passphrase in user_configuration.json in plaintext on the cidata drive, and then says to treat that drive as the secret it is. The warning is in the manual because the design puts the passphrase in a file.

Dictatorship, stated as a feature

The doctrine has ten principles. Two of them do the governing. "Hold the line" retires codes of conduct. "Command is service" names the form of government: one person listens, one person decides, wrong calls get reverted later. "Welcome the agents" invites those agents into the code, the issues, the pull requests, and the infrastructure. "You're somebody now" runs from "billionaires" to "anons," and the billionaires link leaves the doctrine for oligarchy.fyi.

A project can be opinionated and still say who decides. Omarchy says who decides, in the same document that says there are no gatekeepers.