Skip to content

Feature request: Touch ID unlock support on macOS #502

Description

@aerisvagrant

Hi PearPass team.

I would like to request Touch ID support for the macOS desktop app.

Requested feature

Please consider adding an option to unlock PearPass Desktop on macOS using Touch ID.

Suggested behavior:

  • After the user unlocks the vault with the master password once, allow enabling Touch ID unlock in Settings.
  • On subsequent unlocks, allow the user to unlock the vault with Touch ID instead of typing the master password every time.
  • Keep the master password as the fallback and primary recovery method.
  • Require the master password again after certain security-sensitive events, for example:
    • app restart, if preferred by the security model;
    • system reboot;
    • failed Touch ID attempts;
    • Touch ID being disabled or changed in macOS settings;
    • vault timeout or manual lock, depending on the configured policy.
  • Add a clear setting such as:
    • Unlock with Touch ID on macOS
    • optional timeout controls, for example Require master password after X minutes / after restart.

Security expectations

Since PearPass is a password manager, the Touch ID implementation should preserve the existing security model.

Ideally:

  • Touch ID should only be used as a local unlock mechanism.
  • Sensitive unlock material should be protected using macOS-native security mechanisms such as Keychain / Secure Enclave where appropriate.
  • The master password should not be exposed, logged, or stored in plaintext.
  • Users should be able to disable Touch ID unlock at any time.
  • If biometric authentication is unavailable, PearPass should fall back to the vault master password, not silently weaken the unlock flow.

Why this matters

Touch ID support would make PearPass much more convenient to use on MacBooks while still keeping the vault local and private.

For day-to-day usage, repeatedly typing the master password can be slow, especially when the vault locks frequently for security reasons. Touch ID would make frequent unlocks faster while still preserving a strong security posture.

This would also make the macOS desktop experience feel more consistent with modern password managers and with biometric unlock flows available on mobile devices.

Thanks again for the work on PearPass. The local-first and P2P design is excellent, and Touch ID support would make the desktop app more practical for everyday macOS users.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions