pinentry-swift

A modern, native macOS pinentry program for GnuPG with Touch ID support and Keychain integration.

Features

• Native macOS UI - Built with SwiftUI for a seamless macOS experience
• Touch ID Integration - Use biometrics to verify identity before retrieving saved passphrases
• Keychain Storage - Securely store passphrases in macOS Keychain
• GPG Protocol Compliant - Full support for the Assuan pinentry protocol

Installation

Via Homebrew

brew tap kingwkb/tap
brew install pinentry-swift

Configuration

Configure GPG to use pinentry-swift by editing ~/.gnupg/gpg-agent.conf:

pinentry-program /opt/homebrew/bin/pinentry-swift

Restart the GPG agent:

gpgconf --kill gpg-agent

Usage

Once configured, pinentry-swift will automatically handle all GPG passphrase requests.

Touch ID & Keychain

When prompted for a passphrase:

1. Check "Save in Keychain (Touch ID)" to store the passphrase
2. On subsequent uses, authenticate with Touch ID to retrieve the saved passphrase
3. Passphrases are stored securely in macOS Keychain

Requirements

• macOS 12.0 (Monterey) or later
• GnuPG 2.x

Security

• No network access - All operations are local
• Keychain protection - Passphrases stored in macOS Keychain
• Open source - Fully auditable code