search

Kunzisoft / KeePassDX

Lightweight vault and password manager for Android, KeePassDX allows editing encrypted data in a single file in KeePass format and fill in the forms in a secure way.
https://www.keepassdx.com/
GNU General Public License v3.0
4.3k stars 259 forks source link

Can't turn on biometric unlock with Samsung Galaxy S6 Lite tablet #693

Closed mozzis closed 3 years ago

mozzis commented 3 years ago

I am using a Samsung Galaxy S6 Lite tablet with a face recognition camera. I entered my password to open the keepass database, and press the biometric button. The screen blinks white lie but nothing else happens. If I just proceed to unlock the database thanks for the wrong way, but it seems I cannot enable biometric unlock with this device.

J-Jamet commented 3 years ago

Is there an error message? You did not fill out the bug form. Please indicate the version number of KeePassDX used.

mozzis commented 3 years ago

No error messages. Very 2.8.3

Sent from Ninehttp://www.9folders.com/

From: Jérémy JAMET notifications@github.com Sent: Thursday, September 10, 2020 5:40 AM To: Kunzisoft/KeePassDX Cc: Morris Maynard; Author Subject: Re: [Kunzisoft/KeePassDX] Can't turn on biometric unlock. (#693)

Is there an error message? You did not fill out the bug form. Please indicate the version number of KeePassDX used.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/Kunzisoft/KeePassDX/issues/693#issuecomment-690116445, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AANSNSG4JDLCTYTOBCQ27FLSFCNHDANCNFSM4RDVP6DA.

J-Jamet commented 3 years ago

Are you sure you have a secure lock on your phone? https://github.com/Kunzisoft/KeePassDX/wiki/Advanced-Unlocking wiki note : KeePassDX will not be able to operate biometric recognition if a screen lock is not defined.

mozzis commented 3 years ago

Yes, the tablet is protected by a PIN.

From: Jérémy JAMET notifications@github.com Sent: Friday, September 11, 2020 6:49 AM To: Kunzisoft/KeePassDX KeePassDX@noreply.github.com Cc: Morris Maynard morris@maynidea.com; Author author@noreply.github.com Subject: Re: [Kunzisoft/KeePassDX] Can't turn on biometric unlock. (#693)

Are you sure you have a secure lock on your phone? https://github.com/Kunzisoft/KeePassDX/wiki/Advanced-Unlocking wiki note : KeePassDX will not be able to operate biometric recognition if a screen lock is not defined.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/Kunzisoft/KeePassDX/issues/693#issuecomment-691023377, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AANSNSEZHLLFISJG54JJVPLSFH6BTANCNFSM4RDVP6DA.

J-Jamet commented 3 years ago

In this case, I don't see what's wrong. Can you provide logs by compiling the app?

mozzis commented 3 years ago

Compiling? You mean from source code?

From: Jérémy JAMET notifications@github.com Sent: Friday, September 11, 2020 8:47 AM To: Kunzisoft/KeePassDX Cc: Morris Maynard; Author Subject: Re: [Kunzisoft/KeePassDX] Can't turn on biometric unlock. (#693)

In this case, I don't see what's wrong. Can you provide logs by compiling the app?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/Kunzisoft/KeePassDX/issues/693#issuecomment-691073737, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AANSNSGW2VPBP6MDQPUJJFTSFIL4FANCNFSM4RDVP6DA.

J-Jamet commented 3 years ago

If you want or by another way, whatever. I know there are applications that collect logs. Since I can't reproduce the problem, I need to know where it came from. I think your Keystore is not accessible but I can't find out without having the device to test. If you have a custom OS, it might be that too.

ae00711 commented 3 years ago

I am also having this problem with my Samsung Galaxy S7 Edge :(

ae00711 commented 3 years ago

I have SM-G935F I am running: https://forum.xda-developers.com/s7-edge/development/beta-lineageos-17-0-s7-edge-build-1-t3979973/page87 (unofficial LOS 17 / Android 10) Fingerprint works for: andOTP, Session, Signal, Briar, Element, Call Recorder, system itself (phone unlock) but it does not work for KeePassDX, nor for AuthPass Fingerprint did work for KeePassDX when I was using unofficial LOS 16 / Android 9, from the same XDA developer (Ivan M).

J-Jamet commented 3 years ago

@ae00711 In this case, it's a custom ROM issue. (duplicate of https://github.com/Kunzisoft/KeePassDX/issues/215) You say it yourself, it works with other ROMs, so I can't solve it on my side, I think it's a problem with Keystore not accepting secure keys. Edit: I think the other apps you mention don't need the Keystore to store secure keys, tell me if I'm wrong.

J-Jamet commented 3 years ago

@mozzis Are you using a custom Rom?

mozzis commented 3 years ago

No. It's a stock Galaxy S6 Lite tablet.

From: Jérémy JAMET notifications@github.com Sent: Monday, September 14, 2020 2:41 AM To: Kunzisoft/KeePassDX Cc: Morris Maynard; Mention Subject: Re: [Kunzisoft/KeePassDX] Can't turn on biometric unlock with Samsung Galaxy S6 Lite tablet (#693)

@mozzishttps://github.com/mozzis Are you using a custom Rom?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/Kunzisoft/KeePassDX/issues/693#issuecomment-691911041, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AANSNSC6XRG72ISPE3FDYKLSFXJMFANCNFSM4RDVP6DA.

mozzis commented 3 years ago

One thing I thought of, is that I am using the database file from a OneDrive folder. This is a OneDrive for business account. Also want to say, this is not a really big deal for me. I still think that keepass is the best solution.

From: Morris Maynard Sent: Monday, September 14, 2020 8:54 AM To: Kunzisoft/KeePassDX; Kunzisoft/KeePassDX Cc: Mention Subject: Re: [Kunzisoft/KeePassDX] Can't turn on biometric unlock with Samsung Galaxy S6 Lite tablet (#693)

No. It's a stock Galaxy S6 Lite tablet.

From: Jérémy JAMET notifications@github.com Sent: Monday, September 14, 2020 2:41 AM To: Kunzisoft/KeePassDX Cc: Morris Maynard; Mention Subject: Re: [Kunzisoft/KeePassDX] Can't turn on biometric unlock with Samsung Galaxy S6 Lite tablet (#693)

@mozzishttps://github.com/mozzis Are you using a custom Rom?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/Kunzisoft/KeePassDX/issues/693#issuecomment-691911041, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AANSNSC6XRG72ISPE3FDYKLSFXJMFANCNFSM4RDVP6DA.

ae00711 commented 3 years ago

@ae00711 In this case, it's a custom ROM issue. (duplicate of #215) You say it yourself, it works with other ROMs, so I can't solve it on my side, I think it's a problem with Keystore not accepting secure keys. Edit: I think the other apps you mention don't need the Keystore to store secure keys, tell me if I'm wrong.

I had to manually enable keystore access for andOTP

custom ROM?.. I'm not convinced on that point - as I mentioned, KeePassDX worked flawlessly with custom ROM from same developer, just different Android version.

mozzis commented 3 years ago

How did you manually enable keystone access?

From: ae00711 notifications@github.com Sent: Monday, September 14, 2020 5:32 PM To: Kunzisoft/KeePassDX Cc: Morris Maynard; Mention Subject: Re: [Kunzisoft/KeePassDX] Can't turn on biometric unlock with Samsung Galaxy S6 Lite tablet (#693)

@ae00711https://github.com/ae00711 In this case, it's a custom ROM issue. (duplicate of #215https://github.com/Kunzisoft/KeePassDX/issues/215) You say it yourself, it works with other ROMs, so I can't solve it on my side, I think it's a problem with Keystore not accepting secure keys. Edit: I think the other apps you mention don't need the Keystore to store secure keys, tell me if I'm wrong.

I had to manually enable keystore access for andOTP

custom ROM?.. I'm not convinced on that point - as I mentioned, KeePassDX worked flawlessly with custom ROM from same developer, just different Android version.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/Kunzisoft/KeePassDX/issues/693#issuecomment-692372381, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AANSNSEZMYMYDGOD7B4HZT3SF2RXZANCNFSM4RDVP6DA.

ae00711 commented 3 years ago

How did you manually enable keystone access? … ____ From: ae00711 notifications@github.com Sent: Monday, September 14, 2020 5:32 PM To: Kunzisoft/KeePassDX Cc: Morris Maynard; Mention Subject: Re: [Kunzisoft/KeePassDX] Can't turn on biometric unlock with Samsung Galaxy S6 Lite tablet (#693) @ae00711https://github.com/ae00711 In this case, it's a custom ROM issue. (duplicate of #215<#215>) You say it yourself, it works with other ROMs, so I can't solve it on my side, I think it's a problem with Keystore not accepting secure keys. Edit: I think the other apps you mention don't need the Keystore to store secure keys, tell me if I'm wrong. I had to manually enable keystore access for andOTP custom ROM?.. I'm not convinced on that point - as I mentioned, KeePassDX worked flawlessly with custom ROM from same developer, just different Android version. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub<#693 (comment)>, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AANSNSEZMYMYDGOD7B4HZT3SF2RXZANCNFSM4RDVP6DA.

the app (andOTP) has an option in it

J-Jamet commented 3 years ago

Can you tell me if the latest apk in this thread works for you?

mozzis commented 3 years ago

Interesting behaviour I downloaded and installed the APK after uninstalling the one from the store. The first time I opened my DB, it was flashing hint prompts but I there was a message “unable to authenticate with strong biometric”, and also I believe some other message in an orange box that disappeared after a moment. Maybe it was another hint. Anyway, when I enter my password and press the fingerprint icon, this build does the same thing – apparently nothing. If I go on to press the “Open” button the database opens normally. Update: whenever I get to the open database screen, the message about “unable to authenticate with strong biometric” appears and then goes away while I am typing the password to open the database. I did go into the Advanced Unlocking settings and ensured that “Biometric unlocking” is turned on. Also I tried “Delete encryption keys” but that did not help either. I feel I should mention that this tablet does not have a fingerprint reader, only face unlock, so maybe that does not count as “strong biometric”. Thanks for continuing to chase this issue.

From: Jérémy JAMET notifications@github.com Sent: Wednesday, September 30, 2020 4:30 PM To: Kunzisoft/KeePassDX KeePassDX@noreply.github.com Cc: Morris Maynard morris@maynidea.com; Mention mention@noreply.github.com Subject: Re: [Kunzisoft/KeePassDX] Can't turn on biometric unlock with Samsung Galaxy S6 Lite tablet (#693)

Can you tell me if the last apk in this threadhttps://github.com/Kunzisoft/KeePassDX/issues/724#issuecomment-701551601 works for you?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/Kunzisoft/KeePassDX/issues/693#issuecomment-701627429, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AANSNSFAIDF3H52FC5O2YQTSIOIMNANCNFSM4RDVP6DA.

J-Jamet commented 3 years ago

OK, in fact you would normally need strong biometric security to have access to the KeyStore. But on some devices weak security works, apparently not on yours. Do you have any error messages that appear under the biometric button? The goal is now to finely detect whether or not I can use the authentication with biometric and keystore, if it does not work with you, I have to modify the conditions to completely remove the button.

mozzis commented 3 years ago

No additional messages. This sounds like a good plan.

From: Jérémy JAMET notifications@github.com Sent: Thursday, October 1, 2020 6:09 AM To: Kunzisoft/KeePassDX KeePassDX@noreply.github.com Cc: Morris Maynard morris@maynidea.com; Mention mention@noreply.github.com Subject: Re: [Kunzisoft/KeePassDX] Can't turn on biometric unlock with Samsung Galaxy S6 Lite tablet (#693)

OK, in fact you would normally need strong biometric security to have access to the KeyStore. But on some devices weak security works, apparently not on yours. Do you have any error messages that appear under the biometric button? The goal is now to finely detect whether or not I can use the authentication with biometric and keystore, if it does not work with you, I have to modify the conditions to completely remove the button.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/Kunzisoft/KeePassDX/issues/693#issuecomment-702032637, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AANSNSE6JUC5LVEOL2XSOYDSIRIMZANCNFSM4RDVP6DA.

J-Jamet commented 3 years ago

Does version 2.9.6 fix the problem in your case?

mozzis commented 3 years ago

Recent versions seem to work much better with a file stored on OneDrive. I still see a message on my Samsung table about being “Unable to authenticate with strong biometric” but assume this a feature not a bug. Thanks for all of your work on this great tool!

From: Jérémy JAMET notifications@github.com Sent: Wednesday, December 23, 2020 9:03 AM To: Kunzisoft/KeePassDX KeePassDX@noreply.github.com Cc: Morris Maynard morris@maynidea.com; Mention mention@noreply.github.com Subject: Re: [Kunzisoft/KeePassDX] Can't turn on biometric unlock with Samsung Galaxy S6 Lite tablet (#693)

Does version 2.9.6 fix the problem in your case?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/Kunzisoft/KeePassDX/issues/693#issuecomment-750313451, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AANSNSGR33KO5PX4DVVMSSLSWH2ADANCNFSM4RDVP6DA.