Keyboard shortcuts

If you answer many connection alerts, the keyboard is the fastest way. Almost everything in the alert has a shortcut:

ACTION	SHORTCUT
Show or hide the AI Assistant	H or ?
Show or hide the Internet Access Policy (IAP)	I
Show or hide the details	D
Show or hide the warnings	W
Show the next section (warnings, AI Assistant, IAP, details, notes)	C
Show the previous or the next section	Command-Left Arrow or Command-Right Arrow
Close the open section	Command-Up Arrow
Open the last open section again	Command-Down Arrow
Choose the duration Forever	1 or F
Choose the next duration	2 or Right Arrow
Choose the previous duration	3 or Left Arrow
Choose the duration For 1 Minute	0
Choose the duration Until Quit	Q
Choose the duration Until Restart	R
Choose the duration Until Logout	L
Choose the duration Once (Little Snitch creates no rule)	O or hold down Shift
Choose the remote endpoint option Any Connection	A
Choose the previous remote endpoint option	Up Arrow
Choose the next remote endpoint option	Down Arrow
Cycle through the remote endpoint options	S
Cycle through the name options of the remote endpoint	N
Create the rule in the active profile or in all profiles	P
Create the rule in the active profile	4
Create the rule in all profiles	5
Deny the connection	Esc or Option-Return or Command-Period
Allow the connection	Return
Minimize the alert	Command-M

The C key goes through the sections in the order of the buttons in the alert, and after the last one, it closes the section. Sections that don’t apply to the connection are skipped: the alert shows the Warnings and IAP buttons only when there’s something to show.

There’s one more shortcut for the duration: hold down the Control key to choose Forever. If Forever is already your default duration in the alert settings, the Control key chooses Until Quit instead.