NetStacksNetStacks
Contact SalesDownload

Touch ID Unlock (macOS)

Unlock the standalone NetStacks Terminal's local credential vault with Touch ID on macOS instead of typing the master password.

Overview

On a Mac with Touch ID, the standalone NetStacks Terminal can unlock its local credential vault with your fingerprint, so you do not have to type the master password at every launch. Your master password still works and remains the way back in if Touch ID fails.

Standalone Terminal, macOS only

Touch ID unlock exists only on macOS. Windows Hello and Linux fingerprint readers are not supported. In enterprise mode (Terminal connected to a Controller) there is no local vault to unlock, so this feature does not apply.

Requirements

  • The NetStacks Terminal desktop app on macOS, running in standalone mode.
  • A Mac with Touch ID and at least one enrolled fingerprint.
  • A local vault that has already been created and is currently unlocked.

Enabling Touch ID

  1. Unlock the vault with your master password.
  2. Open Settings → Security. Under Touch ID Unlock the status reads Not enabled.
  3. Click Enable Touch ID. NetStacks warns: "Anyone with a registered fingerprint on this Mac will be able to unlock NetStacks. Your master password remains the recovery method."
  4. Type your master password in Confirm master password and click Enable.
  5. Touch the sensor when macOS shows Enable Touch ID for the NetStacks vault.

The status changes to Enabled — you can use Touch ID on the unlock screen.

The Touch ID Unlock section only appears on macOS. You will not see it on Windows or Linux.

Unlocking with Touch ID

At launch the vault gate prompts for Touch ID automatically, once. You can also click Unlock with Touch ID (the button shows Waiting for Touch ID… while macOS displays Unlock the NetStacks vault). Below the button, after the or divider, you can still type the master password and click Unlock.

Disabling Touch ID

Open Settings → Security and click Disable Touch ID. NetStacks deletes the stored keychain entry without asking for a fingerprint. From then on you unlock with the master password only.

How It Works

  • When you enable Touch ID, NetStacks checks your master password, asks for Touch ID, and saves the password in your macOS login Keychain under the service name com.netstacks.terminal.vault.
  • At unlock, NetStacks asks macOS for a Touch ID check, reads the saved password, and unlocks the vault with it. The vault encryption is the same as a manual unlock.
  • If the saved password no longer unlocks the vault (for example after you changed the master password), NetStacks removes the keychain entry and turns Touch ID off. Unlock with your password, then enable Touch ID again.
  • Resetting the vault (Forgot password? → Reset vault) also turns Touch ID off.
Shared Macs

Anyone whose fingerprint is enrolled on the Mac can unlock NetStacks. Only enable Touch ID on a Mac where every enrolled fingerprint belongs to you.

Troubleshooting

No Touch ID section in Settings → Security

You are not on macOS, the vault is locked, or the app is in enterprise mode (the Security tab is hidden there).

The Touch ID button disappeared after I changed my master password

This is expected. The old saved password stopped working, so NetStacks removed it. Unlock with your password and enable Touch ID again.

Touch ID prompt was cancelled

Click Unlock with Touch ID again, or type your master password.