Heads review
Heads measures and verifies the boot chain on compatible hardware, with a technical installation path.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Heads is an open-source custom firmware and Linux boot environment for selected laptops and servers. It is aimed at technical users who want a hardware root of trust and protection for firmware and locally stored data, rather than a stateless live system. Heads combines coreboot firmware with a Linux payload and is available as a free project for self-hosted deployment.
Its focus is measured and verified startup. Heads uses a TPM to measure the boot chain, supports verification of signed kernel and initrd images, and can load Linux kernels from a boot partition, USB, or network using kexec. TPM-based hardware key storage supports drive decryption, while disk-encryption tooling is based on cryptsetup and LUKS. The project also supports HOTP/TOTP workflows using TPM-based tools. This makes Heads a focused option for users prioritizing boot integrity and local data protection, not a general-purpose privacy system with broad device coverage.
Compatibility and installation are the main trade-offs. Heads targets specific hardware, and using it on a physical device involves board-specific firmware and hardware procedures. Its maintainers describe the project as a work in progress and not yet ready for non-technical users; documentation and community are its support channels. Choose Heads if your hardware is supported and you are comfortable with technical firmware work. Users looking for a straightforward installation across a wide range of computers, or a ready-to-use system for less technical users, should consider another approach.
Heads pros and cons
- Where it wins
- Measures the boot chain with a TPM and verifies signed kernel and initrd images
- Uses TPM hardware key storage to support drive decryption
- Includes cryptsetup and LUKS disk-encryption tooling
- Where it doesn't
- Supports only specific hardware
- Physical installation involves board-specific firmware and hardware procedures
- Maintainers describe it as a work in progress, not ready for non-technical users
Heads fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. How we rank.
Last updated · How we research and update