logoalt Hacker News

InsidiousWombat • today at 2:11 PM • 2 replies • view on HN

you can make your SSH agent do that, no need to use bitwarden.

If you're using say yubikey for hardware ssh key (via gpg ssh agent/smartcard interface) you can also make it require physical touch of the key to confirm every operation


Replies

tylergetsay • today at 3:16 PM

If your machine has a TPM chip you can also use that and require a PIN to unlock it, with a mandatory lock out period enforced by the chip

rolosa • today at 3:18 PM

How do I do it with touchid and a MacBook Air?