Looking to reduce number of clicks / input when authenticating desktop app on MacOS using TouchID.
(Thanks to the community and developers for including it in the first place!)
The problem:
I have TouchID enabled on the MacOS app. When BitWarden is open and I switch back to the app from a browser etc., sometimes it is waiting for me to select an authentication method, or worse, to enter the master password. Explanation:
Case 1:
I am presented with:
Unlock with Touch ID
Unlock with master password
Log out
User has to mouse to and then click the āUnlock with Touch IDā button, and THEN use finger on the touch ID button (2 steps)
Case 2:
Sometimes it asks for master password and I have to select Touch ID instead. The options then are:
Master password
Unlock
Unlock with Touch ID
Log out
So I click āUnlock with Touch IDā, and am taken to the same screen as case 1, so itās THREE actions to unlock.
Compared to other implementations of biometrics across Apple devices:
On iOS, locked bank apps immediately initiate Face ID, same with hidden photos (native to iOS demonstrating that Apple only requires physical input/confirmation when making a payment etc).
On browser, passkey logins also prompt for Touch ID without additional clicks from the user.
Summary:
Is there a reason not to just ask for Touch ID when a locked vault becomes the active window? Could this be an option to enable in settings?
(I think/hope this one is self-evidently not dependent on the server implementation, but I will say that Iām using Vaultwarden.)
The Bitwarden client is quite good, but on macOS, there are a specific interaction that cause a bit more friction than the similar scenario with 1Password. I notice these a lot because I use Bitwarden for my personal stuff, and my job uses 1Password.
Bitwarden requires multiple contacts to authorize SSH key usage with TouchID.
The app shifts me to a workspace if the Bitwarden window is open.
The app requires me to start the TouchID process.
(TouchID happens)
The app requires me to then authorize the SSH key usage.
Sometimes, a focus shift happens, or Bitwarden changes workspace, or maybe itās that it doesnāt switch when itās already unlocked. But basically, a small percentage of the time, this happens, and a small percentage of the time I forget to check for it. This results in me staring at my terminal wondering why Git is hanging. Eventually I switch workspaces back and authorize the key use.
1Password, on the other hand:
immediately triggers TouchID, specifically prompting that it will use my key, itās one tap and done
Iām wondering if this is because of cross-platform common denominator (which makes sense). Either way, it would be nice if this could be streamlined. Maybe itās an intentionality thing, and if so, then maybe this could be optional?