Automatically Lock Your Computer Based on Wi-Fi

I use my computer in multiple environments, at home, the office, and out and about. I like having the password prompt after sleep or screensaver start. But I do not like having to enter my password all the time.

Solution: Enable password protection when not at home.

Problem: That’s annoying to remember.

Solution: Don’t.

I wrote a script to detect your what Wi-Fi network you’re on. If it’s not your home network, it sets the password lock. If it is your home network, disable it. This runs via a launchd plist every five minutes (adjustable) and is pretty dang fast.

Note: this only works on a Mac.

Installation

Download the latest files from here.
Put autolock.sh anywhere you like, but remember where you put it.
Inside autolock.sh, replace Death Star on the first line with the SSID (name) of your home network.
- Alternatively, change your network name to Death Star.
In com.edwardloveall.autolock.plist, replace the path/to/autolock.sh with the path to the script in the previous step.
Move the launchd plist to ~/Library/LaunchAgents. If you don’t have the LaunchAgents folder, you can just create it. Spelling and capitalization are important.
Install and start the launchd job with launchctl load -w ~/Library/LaunchAgents/com.edwardloveall.autolock.plist

Now every five minutes (that 300 in the plist) it should run the autolock.sh script and set or unset the password protection. To make sure it’s working, change the SSID name to something else, unload and load the launchd job again and check in System Preferences under Security. “Require password X seconds after sleep or screensaver begins” should reflect the change, one way or another.

Bonus

I thought I was going to need a nice sanitized name for the current Wi-Fi network name, but the way this script works, it doesn’t really end up needing it. It just needs to know if you’re on that network or “something else”. If you do need that functionality, here are some ways to get it:

$ ioreg -rn en0 | grep -e '[^B]SSID' | ruby -e 'puts ARGF.read.chomp.split(/"/).last'

$ ioreg -rn en0 | grep -e '[^B]SSID' | awk 'BEGIN { FS = "\"" }; { print $4 }'

$ /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport -I | grep -e '[^B]SSID' | awk 'BEGIN { FS = ": " }; { print $2 }'

Update

Gabe fixed up my awk code for me so the last two commands there can be:


$ ioreg -rn en0 | awk 'BEGIN { FS = "\"" }; /[^B]SSID/ { print $4 }'

$ /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport -I | awk 'BEGIN { FS = ": " }; /[^B]SSID/ { print $2 }'