search

spesmilo / electrum

Electrum Bitcoin Wallet
https://electrum.org
MIT License
7.53k stars 3.11k forks source link

Android: unlock wallet using fingerprint (biometric authentication) #7560

Open xmready opened 3 years ago

xmready commented 3 years ago

I would like to see Electrum on Android unlock wallets using fingerprint scanning.

Also would like to see the option for a 10 key numeric keyboard when entering the wallet password.

xmready commented 1 year ago

Is there any work being put towards this as on optional feature? It's been almost two years and no acknowledgement of this feature request.

PapaMarc commented 1 month ago

now 3yrs w/no ack (but for related dupe being 'closed' w/out any words to indicate reasoning). Would love to see some current consideration in context of: a) market evolution and b) security benefits of adding. Frankly, wouldn't additionally mind if 2FA in form of Authy support was added as well as biometric fingerprint as primary logon.

in short, agreed-- primary reason i periodically check goog app store for updates to the app is to see if biometric fingerprint logon has been added.

SomberNight commented 1 month ago

The issue was a bit broad, let's narrow it down to only the biometric part. (if you want, you can open a separate issue for the numpad)

now 3yrs w/no ack

Well. I acknowledge that this would be a useful feature. Pull request welcome.

If someone wants to work on this, one consideration is how this would interact with file encryption. Currently the user is prompted for the actual encryption password of the wallet file. When using a fingerprint, we should probably store the encryption password in the secure element, and unlock that using the fingerprint. (this would make exporting wallet files harder but that's already only possible via adb)

Frankly, wouldn't additionally mind if 2FA in form of Authy support was added as well as biometric fingerprint as primary logon.

If you mean TOTP codes, I don't think that would be very useful. First of all, you would need a second phone for it to be a meaningful second factor. Secondly, the codes cannot be used as part of the encryption, only as a user-interface check.