When I try to access a keychain password using the keychain access GUI, I always get a dialog box for inputting the current keychain (login) password.

enter image description here

However, when I try the same thing from the command line using commands like the following

security find-generic-password -gs site_name 

there is no such dialog for password input and the password is just given without any form of validation.

Is there any way to change this?


First try to unlock the keychain with security unlock-keychain -p :the_keychain_password: :path_to_keychain:

| improve this answer | |

I bumped into this same issue, and it seems its all about removing the default access when creating the new password, this is described on help of the command:

security add-generic-password -h

At the bottom you will see:

By default, the application which creates an item is trusted to access its data without warning. You can remove this default access by explicitly specifying an empty app pathname: -T "" If no keychain is specified, the password is added to the default keychain.

So essentially you create the password with the -T "" setting:

security add-generic-password -a YOURUSER -s SERVICENAME -w YOURPASSWORD -T ""
| improve this answer | |

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .