Hacker News Viewer

Show HN: PanicLock – Close your MacBook lid disable TouchID –> password unlock

by seanieb on 4/17/2026, 4:38:44 PM

I wrote this after the case of a Washington Post reporter, Hannah Natanson, was compelled to unlock her computer with her fingerprint. This resulted in access to her Desktop Signal on her computer, revealing sources and their conversations.<p><a href="https:&#x2F;&#x2F;www.yahoo.com&#x2F;news&#x2F;articles&#x2F;washington-post-raid-proves-face-153402560.html" rel="nofollow">https:&#x2F;&#x2F;www.yahoo.com&#x2F;news&#x2F;articles&#x2F;washington-post-raid-pro...</a><p>Edit: I&#x27;ve a lot more details about the legality and precedence on the apps landing page <a href="https:&#x2F;&#x2F;paniclock.github.io&#x2F;" rel="nofollow">https:&#x2F;&#x2F;paniclock.github.io&#x2F;</a>

https://github.com/paniclock/paniclock/

Comments

by: quicklywilliam

Great idea and implementation! If you are hesitant to install this for any reason, you can accomplish the same thing with this one liner:<p><pre><code> sudo bioutil -ws -u 0; sleep 1; sudo bioutil -ws -u 1 </code></pre> Edit: here&#x27;s a shortcut to run the above and then lock your screen. You can give it a global keyboard shortcut in the Shortcuts app. <a href="https:&#x2F;&#x2F;www.icloud.com&#x2F;shortcuts&#x2F;9362945d839140dbbf987e5bce9e1aad" rel="nofollow">https:&#x2F;&#x2F;www.icloud.com&#x2F;shortcuts&#x2F;9362945d839140dbbf987e5bce9...</a>

4/17/2026, 6:11:24 PM


by: october8140

If this were a concern for me the better choice is shutting down the laptop to encrypt the drive and disable biometrics. This does nothing since the drive is still unencrypted.

4/18/2026, 3:41:57 AM


by: VectorLock

Can you get TouchID to register multiple fingers and script the actions; maybe your middle finger unlocks touchID, but your index finger disables touchID until you enter your password.

4/18/2026, 5:39:50 AM


by: mrdomino-

Neat idea.<p>I remember way back in the day, there was some question as to the legality of compelled unlocking of devices; IIRC, it’s been deemed legal to compel a fingerprint, but illegal (under the first amendment?) to compel entry of a password—IIRC, as long as that password hasn’t been written down anywhere.<p>I gather this is written to that end primarily? Or is there some other goal as well?

4/17/2026, 5:45:03 PM


by: momentmaker

The iOS equivalent is to hold the side + volume button until the power slider shows up. Cancel out of it and the next unlock will require your passcode. Pressing the side button 5x triggers Emergency SOS which does the same thing. Been there forever but barely anyone knows about it.<p>Nice to see something like this on the Mac side.

4/18/2026, 1:50:56 AM


by: freehorse

This is great. I see many times &quot;security advice&quot; against biometrics replacing password unlock, but most of the time I am more worried about getting recorded by somebody&#x2F;something while typing a password in the open than anything else. This makes it better for those other cases.

4/17/2026, 7:18:05 PM


by: gruturo

This would be perfect if it could monitor the force with which the lid is closed (macs have accelerometers after all, either this info or an acceptable proxy could be derived?).<p>Gently close? no action.<p>Stronger, faster action? Disable touch ID<p>Slam shut in full panic? yeah disable all biometrics, lose all state, even wipe the ram and the filevault key if it&#x27;s an option

4/17/2026, 9:08:58 PM


by: armadyl

How beneficial is this versus just being theater? The example used in this is the government accessing the reporters laptop via biometrics.<p>But in this case, and especially under this admin legal or not this app won&#x27;t stop them, unless I&#x27;m misunderstanding the macOS security model. Even with FDE enabled, sending it to the lock screen with biometrics disabled will not do anything to stop them from being able to access the contents of the hard drive via forensic methods with relative ease.<p>I think that at best this will only stop the casual person (i.e. a family member or roommate&#x2F;random snooper)? In which case there would be no point to switch away from biometrics.<p>You&#x27;re far better off just keeping more private information on the iPhone and isolating that data from a Mac, since that has far more resistance to intrusion in AFU mode than a Mac.

4/18/2026, 2:59:27 AM


by: surround

&gt; in sensitive situations, law enforcement and border agents in many countries can compel a biometric unlock in ways they cannot with a password.<p>If the threat model includes state-level actors, then disabling biometrics won&#x27;t prevent data from being retrieved from physical memory. It would probably be wiser to enable disk encryption and have a panic button that powers down&#x2F;hibernates the computer so that no unencrypted data remains on RAM.<p>The website says shutdown &quot;takes time&quot; and &quot;kills your session&quot; but a hibernation button would take effect just as fast and would preserve the session.

4/17/2026, 10:19:08 PM


by: wolvoleo

I&#x27;m surprised Apple doesn&#x27;t offer an option. On the iPhone you could do this by pressing the power button several times. Not sure if this still works because the iPhone 6 was my last one though.

4/17/2026, 9:19:35 PM


by: rglover

This is awesome, thank you. Was just thinking about this problem the other day. Glad someone whipped something up.

4/17/2026, 9:30:32 PM


by: ttul

The 2026 version of &quot;Boss Key&quot;.

4/17/2026, 5:57:06 PM


by: p0w3n3d

What&#x27;s the rationale? It should be described in the README.md IMO

4/17/2026, 6:05:06 PM


by: orthogonal_cube

Honestly I’m surprised this wasn’t already a feature in macOS. Thank you for coding it and publishing as open-source!

4/17/2026, 6:41:31 PM


by: moralestapia

This should be an OS X feature, it&#x27;s just that good.<p>Great work, congrats!

4/18/2026, 1:20:03 AM


by: Forgeties79

PSA to iOS users: if you tap the lock button 5x it forces password-only unlocking. Useful at protests or any precarious situations with law enforcement.

4/17/2026, 6:03:06 PM


by: deadbabe

There should just be a way to setup an alternate dummy account based on the finger you use. This gives the illusion of compliance but your real data is safe.

4/18/2026, 12:47:42 AM


by: nailer

If someone can force you to use touch id they can probably also force you to enter your password.<p>(If you’re about to comment about fingerprints on transparency film and balloons filled with warm water then yes good point)

4/17/2026, 9:22:47 PM


by: rsync

[flagged]

4/18/2026, 2:20:33 AM