Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [biometrics]

Biometrics is a set of methods related to unique identification of people based on physiological or behavioural traits

Filter by
Sorted by
Tagged with
0 votes
0 answers
103 views

How 2FA with Biometrics improve security?

Where I work, this is the passwordless registration/login flow for our Mobile App A user registers with a username and a phone number. An SMS OTP is sent to the phone number to verify it. Initial ...
Sentenzalb's user avatar
-2 votes
1 answer
190 views

Biometrics the only real security

Since 2FA exploits are increasing, and most end-users are hellbent on using the least secure passwords available, are biometrics the only real security left?
brain404's user avatar
0 votes
1 answer
89 views

Authentication via User Interaction (Game play, using ML)

Something you know (password), something you are (biometrics), something you have (key card/security key) are the typical authentication factors. Several years ago I've seen a paper in which the users ...
Martin Thoma's user avatar
  • 3,932
16 votes
5 answers
9k views

Can fingerprint readers be trusted?

I've recently obtained a new notebook, specifically a Thinkpad. Now I found out that it has a fingerprint reader integrated into the power button. I am skeptical about biometrics as a security ...
programonkey's user avatar
0 votes
0 answers
128 views

Difference between PassKeys and using touch-id to login in Apps

PassKeys is a new way to sign-in to web-apps and mobile apps by FIDO alliance. I looked at it and could understand how it works; However, I'm unable to understand difference from using touch-id to ...
Procrastinator's user avatar
0 votes
1 answer
314 views

Why does iOS allow using passkey without biometric? [closed]

One of the touted features of passkeys is that they depend on a biometric in order to use them. However, on an iPhone, if the finger-print scanner isn’t successful, it offers you the option of using ...
Ian Warburton's user avatar
2 votes
1 answer
1k views

Re-authentication with biometrics in a mobile app using access token

My mobile app has this (fairly common) authentication user experience: user signs in with email and password user is prompted to enable biometrics for faster access next time when user returns to app ...
Tamlyn's user avatar
  • 175
3 votes
1 answer
219 views

How are the bank's "voiceprint" authentication methods secure?

A few years ago, an agent from the bank rang up to say my credit card was compromised. But first they wanted me to confirm who I was. I refused, they were ringing from a private number, they could ...
Rohit Gupta's user avatar
3 votes
1 answer
796 views

Could high res photographs of eyes be used to fool eye based biometrics?

There's a company called irisgalerie that takes high res photographs of your eye and then sells prints to you. So let's say you got one of these pics and then posted it on social media. Could someone ...
neubert's user avatar
  • 1,758
2 votes
2 answers
138 views

How can a users plaintext password be acquired while using biometricID with the following security model?

This is a slightly tough one to explain with my current experience, lacking mainstream terminology. But here goes. I have an encryption/security model whereby I do not store users plaintext passwords. ...
RobbB's user avatar
  • 261
0 votes
0 answers
154 views

Solutions for out of band biometric login

I am enhancing our login flow to include biometric verification via your phone. The user will log in to the desktop app but will have to verify their identity via their phone. We already have an app ...
Decrypter's user avatar
  • 101
19 votes
4 answers
6k views

How is TouchID more secure than a simple password?

This likely stems from my complete lack of familiarity with encryption technology and IT security in general, however it isn't clear to me how biometric authentication (such as Apple's TouchID) makes ...
10GeV's user avatar
  • 301
0 votes
0 answers
23 views

Are fingerprints stored in biometric checks? [duplicate]

There is a digital banking app for increasing wallet limits. We can verify our fingerprint with this feature. My question is, is it safe to use? I mean are they going to store my fingerprint and then ...
MoxSk's user avatar
  • 1
0 votes
1 answer
136 views

Voice input as security measures for system authentication

Can voice input as a password be a useful security measure as an alternative to a strong password and biometrics (face, thumb, signature etc)? The voice inputted as a password will be saved as a sound ...
Prashant Akerkar's user avatar
0 votes
0 answers
579 views

What are the differences between ISO 19794-2 and ANSI 378 fingerprint template?

I am looking for the differences between the ISO 19794-2 and ANSI 378 fingerprint templates. If there are differences, for what types of applications are each of these standards most suitable?
Martin Denion's user avatar
10 votes
1 answer
2k views

Are fingerprints less secure (at a software level) on Android (10+)?

Inspired by this question (and more specifically, this answer to the same): When a passphrase is used, the encryption key is not stored directly in the device. […] When using biometrics, each reading ...
Matthew's user avatar
  • 423
0 votes
0 answers
245 views

How can one avoid being identified by facial recognition in a public setting?

Facial recognition is ubiquitous and methods like disguises, surgical masks and makeup are becoming ineffective owing to the improvement in algorithms. In light of these advances, what are some ...
CSLewis's user avatar
0 votes
0 answers
196 views

How reliable is a mathematical model of a human fingerprint for identification?

How reliable is a mathematical model of a human fingerprint for identification? I am looking for a way to uniquely identify individuals that is very reliable and easy to use that does not require ...
polcott's user avatar
  • 93
0 votes
2 answers
225 views

How/What to prompt user for fingerprint login using smartcard?

We are using a PIV smartcard that has biometric information (fingerprint) of the user encoded on the card to login into our application. We have the capability to read the fingerprint from a reader ...
always_a_rookie's user avatar
22 votes
4 answers
4k views

How will biometrics be a safe way to authenticate users across the internet?

Let's say Alice created a new account on a service and this service saved her fingerprint as a way of logging in later. Then Alice creates a new account on a new service, but unfortunately this second ...
Mohammed Rady's user avatar
2 votes
1 answer
417 views

How are fingerprints secure on Samsung A70

I use keepass to store my passwords and the keepassdx app to access that database on my Android phone. It offers the option to allow me to unlock with a fingerprint, if I set up fingerprint Auth on my ...
artfulrobot's user avatar
-3 votes
2 answers
253 views

Number of biometric samples required to form an exhaustive set of fingerprint hashes?

Number of biometric samples required to form an exhaustive set of fingerprint hashes? Slight variations in the sample produce different hash values of the sample data. The answer linked below ...
polcott's user avatar
  • 93
17 votes
2 answers
5k views

Does biometric authentication in Android transfer any biometric data to the app?

On my Android phone I use several apps that propose biometric authentication. If I enable it, can these applications read my fingerprint data and transfer it to the third party servers?
Vitalii's user avatar
  • 687
1 vote
2 answers
701 views

Can a fingerprint be reconstructed from a device that uses it for authentication?

I've noticed a lot of phones (not to mention, other devices) have built in fingerprint sensors these days. Do these devices store information in such a way that your fingerprint could be reconstructed ...
user1833028's user avatar
55 votes
8 answers
11k views

How can we eliminate passwords given the problems with biometric authentication?

I've read articles suggesting that passwords will eventually go the way of the dinosaur only to be replaced by biometrics, PINs, and other methods of authentication. This piece claims that Microsoft, ...
pancake-house's user avatar
0 votes
0 answers
223 views

Does mobile biometric authentication count as Knowledge, Possession, or Inherence authentication

Apple claims in this year's WWDC that Face ID and Touch ID count for both Possession and Inherence identity factors, because they are using Biometrics (Inherence) to access the secure element on your ...
dodgertodd's user avatar
0 votes
2 answers
1k views

Should password reset disable biometric sign in until the user signs in with username and password again?

Background: My team's mobile apps have biometric sign in (Touch ID, Face ID, fingerprint). You can enable and disable biometric sign in when you are signed in. You always have the option to sign in ...
Aaron B's user avatar
  • 103
-1 votes
1 answer
127 views

Why computers accept biometrics as first authentication but not phones

After powering on laptops and desktop computers, you are allowed to use biometrics for login. But, as far as I know, biometrics are not allowed for unlocking phones after powering them on. You are ...
Charitoo's user avatar
1 vote
0 answers
103 views

MFA: can unique biometrics collecting device count as another authentication factor (a possession factor)?

I see in this answer (Aren't endpoint devices inherently MFA?) that an endpoint device doesn't qualify as an authentication factor (AF). But if the endpoint biometric collecting device is uniquely ...
Harold's user avatar
  • 11
2 votes
3 answers
217 views

How are biometrics tougher to crack than a pin?

When I hear that bio-metrics are tougher to crack, it's left ambiguous as to whether they refer to the term 'hack' as simply getting through the system by guessing the password or mimicking the person....
yolo's user avatar
  • 123
1 vote
1 answer
438 views

Biometric authentication against server

I'm working on an iOS app whose login system does not seem entirely secure but I don't know enough to be sure. Skipping account creation, the first time the user logs in they send their user and ...
nscan's user avatar
  • 11
1 vote
0 answers
206 views

Is Apple’s Face ID less secure in the dark?

Apple’s FaceID on iPhone X works even in the dark using infrared light to “illuminate” your face with an IR projection and collect the features. When designing the algorithms that confirm a user’s ...
VAndrei's user avatar
  • 127
2 votes
0 answers
172 views

Is what fingerprint scanners in mobiles store a stealable value?

If a fingerprint scanner were a human it would probably be like this: take a photo of the finger presented for authentication check it against the original photo to determine if it's the same. This ...
artfulrobot's user avatar
3 votes
1 answer
265 views

Is it safe to store and transmit fingerprint templates in ANSI or ISO formats in cleartext format?

I working on a setup where I'm getting users to scan their fingers for fingerprint at a local machine but, the templates are stored at a centralized server for efficiency reasons. Since the ...
Vineet Menon's user avatar
2 votes
0 answers
302 views

How much entropy does Apple Touch ID sensor read fingerprint has?

Iphone uses by default 6-digit PIN that has an entropy of 19.93 bits When iPhone processes the fingerprint, how much entropy does it have? How long should standard passphrase be until it is as ...
ccccc1cc's user avatar
5 votes
1 answer
256 views

How secure are Windows logins tied to physical human fingerprints?

Some business laptops have a fingerprint reader, and Windows has the ability to use your fingerprint to log into an account in lieu of a typed password. I understand that these open up lines of ...
Chuu's user avatar
  • 153
1 vote
0 answers
23 views

Security of Passwords vs Biometrics [duplicate]

Would a password with multi factor authentication be more secure than biometrics? I am asking due to the fact that if biometric data gets compromised, there is no way to change it, and in data ...
john doe's user avatar
  • 708
2 votes
1 answer
490 views

Why are pins required on boot on devices with fingerprint readers? [duplicate]

Both my iPad and my android phone are configured to allow access via either a pin, or a fingerprint scan. However, immediately after a reboot, neither device allows a fingerprint for the first unlock; ...
Jason C's user avatar
  • 273
1 vote
0 answers
208 views

Disable Paste in Password field to use keystroke dynamics as 2FA

Paul Moore argues that one legitimate reason to disable paste in the password field (despite the downsides) is so that the server can use keystroke dynamics (behavioral biometrics) as a second form of ...
browly's user avatar
  • 2,100
1 vote
2 answers
2k views

How secure is the fingerprint sensor in the Pixel 3?

As far as I understand different fingerprint scanners have different security levels. Old fingerprint print scanners could be fooled quite easily as the CCC (Chaos Computer Club) demonstrated. How ...
Christian's user avatar
  • 1,936
0 votes
1 answer
254 views

Does the device you are logging into count as one of the factors for MFA when you are using device biometrics? [duplicate]

Yes it does because I 'have' the physical device I 'am' the owner of the fingerprint But no it doesn't because 1=>2 : If you have my device the fingerprint is now something you can get. Which ...
Chris F Carroll's user avatar
9 votes
3 answers
2k views

Plausibility of DNA sequence for encryption

To start with: This is in consideration of in-body implants. The answer should (initially) assume there is no record of your DNA sequence mapped by a third party yet. The question boils down to ...
Pogrindis's user avatar
  • 181
1 vote
2 answers
6k views

Combining a fingerprint scan and password for 2-factor-authentication [closed]

UPDATE: I found the answer to the "How To?" part of my question on superuser: Require Fingerprint AND Password/Pin for Windows Logon Is it possible to require a TOTP on Windows Login using existing ...
PixelMaster's user avatar
3 votes
0 answers
350 views

How does biometric authentication work from a technical perspective?

Together with a colleague, we discussed the way of biometric authentication and how this works out. Both of us are only interested in security but far from being an expert on the technical side. ...
Alex's user avatar
  • 31
2 votes
1 answer
158 views

What organizations have 1B faces to train a facial recognition neural network? [closed]

An article claims that a neural network was trained with over a billion images. Assume that the majority of images contain a face. The infrared camera takes an image and the dot projector uses ...
gatorback's user avatar
  • 1,521
6 votes
2 answers
2k views

How safe is it to use Fingerprint-based authentication on unencrypted Android devices?

Since I needed root permissions for several apps on my Samsung Galaxy S8+ (SM-G955F) device, I followed a guide that showed how to install a superuser binary on the device's Android 7. There was a ...
Manchineel's user avatar
2 votes
2 answers
5k views

Why fingerprint scanner doesn't work after reboot on Mi phones?

When I first experienced this I ignored it. But after some days I noticed that I had to unlock it by pattern lock or password everytime I restart the phone and after unlocking by pattern/password, I ...
daya's user avatar
  • 177
0 votes
1 answer
184 views

What implementations of Biometrics Encryption exist now? [closed]

As I was studying a paper authored by Anna Romanou with title "The necessity of the implementation of Privacy by Design in sectors where data protection concerns arise" I came across Ann Cavoukian's ...
Dimitrios Desyllas's user avatar
5 votes
1 answer
593 views

How identifiable is a caricature made from a photo?

I accept that to some degree this will depend on the software/exact processes used, but I'd like a general idea as to how "risky" it is, and get a better understanding of how biometrics simplifies ...
davidgo's user avatar
  • 611
1 vote
1 answer
550 views

How reliable is using Fingerprint sensor (iPhone/Android) for identity approval?

What I'm trying to achieve is a confirmation of transaction (not payment) with a fingerprint sensor. Pretty much like Google does in its Play store: Chose a product, click pay Approve your choice ...
ovnia's user avatar
  • 111