The Wayback Machine - http://web.archive.org/web/20201127073518/https://github.com/bitwarden/mobile/issues/590
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Documentation] Fingerprint lock and encryption #590

Open
gpa opened this issue Sep 2, 2019 · 2 comments
Open

[Documentation] Fingerprint lock and encryption #590

gpa opened this issue Sep 2, 2019 · 2 comments

Comments

@gpa
Copy link

@gpa gpa commented Sep 2, 2019

I logged in with my passphrase to the mobile app and then set the fingerprint lock. I just assumed that the unencrypted data is kept in memory and then only shown after a fingerprint verification. But then I restarted my phone and was still able to access the data with just the fingerprint. From reading the source code I could see that a FingerprintUnlockKey is being used, but it is unclear to me how it works and would really appreciate some documentation on it and how it compares to just using the password security-wise.

@gpa gpa changed the title [Documentation] How does the fingerprint lock work? [Documentation] Fingerprint lock and encryption Sep 2, 2019
@kspearrin
Copy link
Collaborator

@kspearrin kspearrin commented Sep 2, 2019

The encryption key is persisted to the protected storage area on the device (keychain or key store).

@uchagani
Copy link

@uchagani uchagani commented Oct 2, 2019

In my opinion, on reboot all instances (app and auto fill extension) should be locked.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
3 participants
You can’t perform that action at this time.