Kunzisoft / KeePassDX

Lightweight vault and password manager for Android, KeePassDX allows editing encrypted data in a single file in KeePass format and fill in the forms in a secure way.
https://www.keepassdx.com/
GNU General Public License v3.0
4.77k stars 276 forks source link

Advanced unlocking/biometrix unlocking with multiple fingers #1038

Open koerli89 opened 3 years ago

koerli89 commented 3 years ago

I would really like to use advanced unlocking. Typing a long masterpassword over and over is very tedious. However, fingerprint logins have been shown to be unsave.

So the questions is, would it be possible to have a multiple fingerprint unlocking mechanism where you need to validate 2 or more fingers in a given period of time to unlock the keefile?

I would feel much saver with this and would consider using it.

cbiere commented 2 years ago

I doubt it because biometrics are transparently handled by the operating system. Also, I question the point of this feature because 10x unsafe is still unsafe. If someone has access to one fingerprint, most-likely he has access to all of them. What could be implemented is a check for a password plus a biometric feature.

J-Jamet commented 2 years ago

As @cbiere says, the recognition is done by API of the system, technically it would require cascading keys into the Keystore and unlocking them several times but there is no real point in doing that.