Hello everyone,
For my work, I use an Android phone that has a facial recognition system but does not have a fingerprint reader (Samsung xcover 5).
In the settings of passbolt app, I can’t activate biometry authentication because the only option available is “Fingerprint”.
Is it possible to use the biometry interface of the phone ?
Thanks by adavance.
hello @hansolo57,
it is possible to unlock with face as the app uses Biometric Prompt, which integrates various biometric methods, but the face unlock implementation on the device must be strong enough. We require AUTH_BIOMETRIC_STRONG which requires a Class 3 biometry implementation.
Many Android devices offer face unlock, which may be weak from a security perspective (i.e. just compare photos) while some of them include stronger mechanisms (i.e. use machine learning, check liveliness, use photos with many focal points).
As an example, it’s possible to unlock with face on a Pixel 9 device (“Verify it’s you in the apps” switch must be enabled in the “Face & Fingerprint unlock” settings)
Hello,
Thank you for your response.
How do I know which phones comply with this standard?
Unfortunately, it’s not easy to validate without having the phone, as there is no official list with devices and their biometry implementation strength. The best way is to try to find this information in the specifications of the selected phone - some manufacturers provide this information. Or try to ask in public.
