Make /usr/bin/security ask for Touch ID verification

Question

I can add a password to the keyring like this:

security add-generic-password -a $USER -s my-password-entry -T /usr/bin/security -U -w

... and read it like this:

security find-generic-password -a $USER -s my-password-entry -g -w

But is there a way to make security ask for Touch ID verification every time I ask for my-password-entry?

References:

• accessing Keychain Access from terminal - OSX
• http://www.manpagez.com/man/1/security/osx-10.5.php

Answer 1

Yes, you can modify your command line to look like this when adding the password:

security add-generic-password -a $USER -s my-password-entry -T "" -U -w

This will ensure that no application is trusted to access the data without warning.