🔐 SecurePress

🔐 SecurePress is a Stream Deck plugin that adds Windows Hello biometric authentication to protect sensitive actions. Lock your Stream Deck buttons behind fingerprint, facial recognition, or PIN verification - perfect for streamers and power users who need enterprise-grade security for critical operations.

🎮 Stream Deck Plugin

Protect Stream Deck actions with a Windows Hello gate before launching apps, running scripts, sending HTTP requests, triggering hotkeys, or entering text.

promo.mp4

_{▶ Press play for sound. Not rendering (e.g. outside GitHub)? Download the MP4.}

Real Property Inspector Screenshots

✨ Features

🔐 Biometric Security - Lock actions behind Windows Hello authentication (fingerprint, facial recognition, or PIN)

⚡ Multiple Action Types:

• 🖥️ Execute programs and applications
• ⌨️ Trigger keyboard hotkeys
• 📜 Run PowerShell and Python scripts
• 🌐 Send HTTP requests (GET, POST, PUT, DELETE)
• ✍️ Input text (paste or simulate typing)
• 🔄 Execute multi-command sequences

🎨 Visual Feedback - Color-coded status indicators:

• 🟢 Green badge - Authentication successful
• 🔴 Red badge - Authentication failed
• 🟠 Orange badge - Authentication in progress
• ⚪ No badge - Idle state

📥 Installation

From Stream Deck Marketplace

Install SecurePress directly from the Elgato Marketplace.

Manual Installation

1. Download the latest com.securepress.action.streamDeckPlugin from Releases
2. Double-click the file to install
3. The plugin will appear in Stream Deck's action list
4. Drag and drop to add it to your Stream Deck

🚀 Quick Start

1. Install SecurePress from the Elgato Marketplace or download it from GitHub Releases
2. Add SecurePress action to your Stream Deck
3. Configure the action in the property inspector:
   • Select action type (Program, Hotkey, Script, HTTP, Text, or Sequence)
   • Fill in the required fields
4. Press the button on your Stream Deck
5. Authenticate with Windows Hello (fingerprint, face, or PIN)
6. Action executes after successful authentication!

🎯 Action Types

💻 Execute Program

Launch applications and executables securely.

• Specify program path and optional arguments
• Perfect for opening sensitive documents or admin tools

⌨️ Hotkey

Trigger keyboard shortcuts that require protection.

• Supports modifiers (Ctrl, Alt, Shift, Win)
• Ideal for system commands or dangerous shortcuts

📜 Run Script

Execute PowerShell or Python scripts with authentication.

• Choose between PowerShell (.ps1) or Python (.py)
• Secure automation for system tasks

🌐 HTTP Request

Send authenticated HTTP requests.

• Support for GET, POST, PUT, DELETE methods
• Custom headers and request body
• Optional response popup

✍️ Text Input

Type or paste text securely.

• Simulate typing or paste from clipboard
• Optional "Press Enter" after input
• Great for passwords or sensitive data

🔄 Multi-Command Sequence

Chain multiple actions together.

• Execute a series of protected actions
• Combine different action types in sequence

🛠️ Requirements

• Operating System: Windows 10/11
• Stream Deck Software: 6.9 or higher
• Windows Hello: Configured with fingerprint reader, facial recognition camera, or PIN
• Runtime: No separate .NET runtime required for the packaged plugin

💻 Development

Prerequisites

• Node.js 20+
• npm
• Windows 10/11 with Windows Hello configured

Setup

cd streamdeck-plugin
npm install

Build

npm run build

Package for Distribution

npm run build:package

Install Locally for Testing

npm run install:local

See DEVELOPMENT.md for detailed development instructions.

🧠 How It Works

SecurePress integrates Windows Hello authentication into your Stream Deck workflow:

1. Button Press - User presses a SecurePress button
2. Authentication Prompt - Windows Hello biometric prompt appears
3. Verification - User authenticates with fingerprint, face, or PIN
4. Action Execution - Configured action executes only after successful authentication
5. Visual Feedback - Button shows color-coded status (green/red/orange)

🔒 Security Notes

• SecurePress now redacts sensitive action fields from debug logs.
• Sensitive action fields are stored outside Stream Deck settings with Windows DPAPI protection in the current user's profile. The Stream Deck profile stores only references.
• Secrets protected with DPAPI are tied to the Windows user profile and are not portable to another Windows account or machine.
• Configured programs, scripts, text, and HTTP requests execute with the same permissions as Stream Deck.

🤝 Contributions

Contributions and improvements are welcome! Feel free to submit a pull request or report any issues on GitHub Issues.

💖 Support the Project

This project is completely free and open source. If you find it useful and would like to support its continued development and updates, consider making a donation. Your support helps keep the project alive and motivates me to add new features and improvements!

Every contribution, no matter how small, is greatly appreciated! ❤️

📜 License

This project is licensed under the MIT License. See LICENSE for details.

---

_{Made with ❤️ by Giovanni Guarino}