Hi,
Thanks for this excellent work, it's going to change my life!
I took the red pill too, my goal being to:
- Unlock my macOS session
- Unlock my various KeePassXC databases
After enrolling several fingerprints on the sensor, I modified the script so it recognizes which fingerprint was matched and loads the associated password. This lets me have a different password per fingerprint.
I also took the opportunity to improve security a bit. In the current code, once the session is unlocked, passwords can be read from the Terminal. I reduced that attack surface by only allowing tinyTouch's own Python executable to interact with the Keychain, using macOS's native API instead of the security CLI command. I also moved the password and pairing key away from command-line arguments to a masked interactive prompt, so they no longer end up in shell history or process listings.
I'm also currently working on improving the KeePassXC unlock flow to avoid storing the master password in the Keychain at all — the idea is to derive the key material on-device instead, so the secret never needs to be persisted on disk.
One more thing: I'm sharing an updated .ino with basic AZERTY keyboard layout support, since the original assumes QWERTY. It's a simple character-mapping table, so feel free to adapt it for other layouts too.
I'm sharing my updated files, hoping it motivates others to jump into this project — it's really a great one.
Thanks again,
K.
tinytouch_helper.py
tiny_touch_keyboard_for_azerty.ino.txt
requirements.txt
Hi,
Thanks for this excellent work, it's going to change my life!
I took the red pill too, my goal being to:
After enrolling several fingerprints on the sensor, I modified the script so it recognizes which fingerprint was matched and loads the associated password. This lets me have a different password per fingerprint.
I also took the opportunity to improve security a bit. In the current code, once the session is unlocked, passwords can be read from the Terminal. I reduced that attack surface by only allowing tinyTouch's own Python executable to interact with the Keychain, using macOS's native API instead of the security CLI command. I also moved the password and pairing key away from command-line arguments to a masked interactive prompt, so they no longer end up in shell history or process listings.
I'm also currently working on improving the KeePassXC unlock flow to avoid storing the master password in the Keychain at all — the idea is to derive the key material on-device instead, so the secret never needs to be persisted on disk.
One more thing: I'm sharing an updated .ino with basic AZERTY keyboard layout support, since the original assumes QWERTY. It's a simple character-mapping table, so feel free to adapt it for other layouts too.
I'm sharing my updated files, hoping it motivates others to jump into this project — it's really a great one.
Thanks again,
K.
tinytouch_helper.py
tiny_touch_keyboard_for_azerty.ino.txt
requirements.txt