Comparison
immurok vs Touch ID
Touch ID is excellent when it is built into the Mac you are using. Everywhere else, it is either a US$149 to US$199 keyboard or nothing. Here is where immurok fits, and where it does not.
Side by side
| immurok IK-1 | Magic Keyboard with Touch ID | Built-in Touch ID | |
|---|---|---|---|
| Price | US$69 | US$149 to US$199 | Included with MacBooks |
| Mac mini, Mac Studio, iMac, Mac Pro | Yes | Yes, Apple Silicon only | No |
| MacBook in clamshell mode | Yes | Yes | Lid is closed |
| Intel Macs | Yes, macOS 13+ | No | Some models |
| Use your own keyboard | Yes, any | It is the keyboard | It is the keyboard |
| Screen unlock | Yes | Yes | Yes |
| sudo in the terminal | Yes, via PAM | Yes, with a PAM setting | Yes, with a PAM setting |
| SSH and Git signing | On-device ECDSA key | No | No |
| 1Password, Bitwarden unlock | Yes | Yes | Yes |
| Apple Pay on the Mac | No | Yes | Yes |
| Windows and Linux | Yes | No | No |
| Two computers, one sensor | Yes, switch finger | No | No |
| Wireless | Bluetooth LE | Bluetooth | Built in |
| Where the fingerprint lives | On the key | Secure Enclave | Secure Enclave |
| Source available | Apps Apache 2.0, firmware BSL 1.1 | No | No |
Is there a standalone Touch ID for the Mac?
Not from Apple, and not from anyone else. Touch ID is fused to the Secure Enclave in the Mac, so the sensor has to be part of the machine or of a keyboard Apple pairs to it. Apple's only add-on is the Magic Keyboard with Touch ID, which needs an Apple Silicon Mac and replaces whatever keyboard you have. If you use a Mac mini with a mechanical keyboard, an Intel iMac, or a MacBook with the lid closed, there is no Touch ID for you.
immurok is the closest thing: a separate device with its own sensor that sits on the desk next to any keyboard. It is not Touch ID, and macOS does not see it as a biometric. It has its own security model and it works with Windows and Linux too.
What Touch ID does that immurok cannot
Anything that calls Apple's own biometric prompt and accepts nothing else. Apple Pay confirmations on the Mac are the everyday example: they need Touch ID or your iPhone. Apps that use Apple's LocalAuthentication framework will still show the Touch ID prompt or ask for your password. immurok covers the password prompts around that: the lock screen, sudo, admin dialogs, the App Store, the Passwords app, third-party password managers, and it adds SSH and Git signing, which Touch ID does not do at all.
Where the fingerprint goes
Touch ID keeps your template in the Secure Enclave and never lets it out. immurok keeps yours on the key and never lets it out either. What crosses Bluetooth is an HMAC-signed “match succeeded”, and the key pairs with your Mac through a direct ECDH P-256 exchange. The two are different chips with different threat models; the security model post has the honest version.
Which one should you get?
- A MacBook you use open: you already have Touch ID. immurok adds SSH and Git signing and a second computer, but that is a nice-to-have.
- A desktop Mac or a clamshell MacBook, and you like your keyboard: immurok, at less than half the price of the Magic Keyboard with Touch ID, and it comes along to your Windows or Linux machine.
- A desktop Apple Silicon Mac, and you want Apple Pay on the Mac: the Magic Keyboard with Touch ID is the only way to get that. immurok can sit next to it for SSH, Linux and Windows.
Common questions
Can immurok replace the Magic Keyboard with Touch ID?
For unlock, sudo, admin prompts and password managers, yes; for Apple Pay, no. immurok does everything the keyboard's sensor does for everyday authentication, adds SSH and Git signing, and works with any keyboard and any OS. Apple Pay on the Mac still needs Touch ID or an iPhone.
Does immurok use the Secure Enclave?
No. The Secure Enclave is Apple's chip and only Apple's sensors talk to it. immurok has its own secure storage on the key, its own ECDH pairing and its own signed firmware. The fingerprint never leaves the key, and macOS only ever receives a signed proof that a match happened.
Does it work on an Intel Mac?
Yes. The Mac app is one universal build for Apple Silicon and Intel, macOS 13.0 or later. The Magic Keyboard with Touch ID does not pair its sensor with Intel Macs.
Ships December 2026. One-year warranty. No subscription.