To further improve the utilization of TouchID on Macbook Pro and make the unlock feature more intuitive to use (see comments in #2720 for pull request #1851), I would like to implement the following changes:

• Make enabling TouchID a global setting (not per database)
• Add an indication that TouchID is available to unlock (colored icon) on the unlock screen / greyed out when it is not. When it is disabled in the settings no icon is shown.
• Unlock with TouchID is triggered when it is activated/available and ...
  • ... User clicks on the colored icon
  • ... User tries to unlock database without entering a password
  • ... Window is being brought to the foreground by the user
  • ... Tab is being changed / brought to foreground (multi database usage)
  • I would suggest making the last two scenarios an optional setting
• TouchID is automatically deactivated on 3 consecutively failed tries (until user enters the password correctly again)
• Raising the maximum time-out of TouchID (currently the maximum value is 999 minutes)

Further additions (edited):

• Hints and dialog that guide the user through the process of activating and using TouchID for Keepass
• Enable TouchID persistently across restarts of the application

How do you guys feel about this?