Many password managers for mobile offer the option to unlock the password vault with a fingerprint instead of a password. If you never type in your master password, how is it possible to decrypt the data? It appears that there must be a way to decrypt the database without actually typing in the master password.

  • Why do you think the master password is required to decrypt? – schroeder Nov 15 '19 at 16:30
  • And I think any specific answer will be specific to a particular product. For LastPass, it is explained here: support.logmeininc.com/lastpass/help/… – schroeder Nov 15 '19 at 16:34
  • @schroeder Because the contrary would imply that it is possible to decrypt the database without knowing the password, which would defeat the whole point of having a password. – Ciprum Nov 15 '19 at 16:48
  • Ah, then you have an X/Y problem. Read the LastPass link for at least one product's approach. – schroeder Nov 15 '19 at 16:50
  • 1
    Password is required, it's just not required to be entered every time. Various methods to either cache the password or keep the db decrypted. – schroeder Nov 15 '19 at 16:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.