Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've got an encrypted disk sparse bundle disk image and I've used fstab with the right UUID to mount it someplace other than /Volumes. What I would like is to just dbl-click on it, enter the password and have it show up where I want it. I use a password manager and I have intentionally chosen a long random gibberish password for the disk image. It seems that I am not allowed to paste my password into the dialog that asks for a password when mounting an encrypted disk image.

Am I doing something wrong?

share|improve this question
The OS also disables keyboard loggers when in a secure text entry field. TextExpander is an example of a legitimate keyboard logger. – Mark Jan 25 '13 at 21:10
How are you trying to paste? I've found areas where cmd+v doesn't work but ctrl+click > paste does work. – forquare Jun 28 '15 at 0:12
up vote 14 down vote accepted

No, you aren't doing anything wrong. Apple doesn't allow you to paste into certain secure dialog boxes. It's a feature, not a bug. (It makes a brute force hack of the dialog box more difficult.)

You can paste the password into the command line if you mount the secure image using hdiutil.

Open Terminal and type:

 hdiutil attach /path/to/imagefile -stdinpass

When prompted for the password, copy it from a text file or (preferably) a password vault and paste it into terminal.

If the path/to/imagefile is complex, you can type the command, a space, then drag the imagefile icon from the finder into the terminal window to automatically enter the path/filname.

share|improve this answer
Awesome. So I'm encouraged to only use a password that I can remember and type easily. – kbyrd Jan 25 '13 at 21:27
I generate and store the passwords in Password Wallet and type them into the dialog. They're not overly long, but they are random and at least to my thinking, they're secure enough. – jaberg Jan 25 '13 at 21:47
What an odd choice by Apple, to make brute-forcing the dialog box harder, while it's still possible (and I would say easier) to brute-force the command-line utility. – drfrogsplat Dec 5 '13 at 1:55
@drfrogsplat, exactly. This is a terrible feature—all it does is make it harder to use password managers. – Will Jan 7 '15 at 14:31
This feature is outdated and stupid... can't use 1password at all. Can't even copy the suggested password – amleszk Apr 7 '15 at 19:25

I wrote a very tiny AppleScript application which allows you to paste passwords even where its not allowed by tricking the system into thinking that you're typing on your keyboard. The downside: it takes space in your Dock.

share|improve this answer

You could also run a script like this in AppleScript Editor:

tell application "System Events" to tell process "SecurityAgent"
    set value of text field 1 of window 1 to (the clipboard)
    click button 1 of group 1 of window 1
end tell

It requires access for assistive devices to be enabled from System Preferences.

share|improve this answer
WOW! Thanks a lot. These 4 lines will save me hours of time and make my passwords stronger. – Yan Jan 16 '14 at 10:15
I would strongly recommend that people use hdiutil as jaberg answered instead of resorting to UI automations such as this one. – Blacklight Shining Sep 18 '15 at 2:36
thank you! my keyboard is being fragged and the left and right shift keys dont work - not so good for passwords that need shift-numbers on a mac book air ;9 – Bae Oct 2 '15 at 11:46

Apple's security prevents this as answered separately by jaberg. But are you not prompted to store the password in your keychain? I've only used encrypted physical volumes and not disk images, but I'm always prompted to store the password to my keychain.

share|improve this answer
Storing the password in the system keychain runs against the notion of keeping the enclosed files secure. If someone has access to your open account, they can access the encrypted files. You could however move the keys for encrypted images into a second keychain that is protected by a different password. That way you would only have one additional complex password to remember. – jaberg Jan 25 '13 at 22:04
I specifically don't want to use the keychain. I use my password manager for that. – kbyrd Jan 28 '13 at 15:06

protected by Community Apr 8 '15 at 14:21

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site.

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.