Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fingerprint reader support [$65] #3337

Closed
userosos opened this issue Jun 28, 2019 · 84 comments
Closed

Fingerprint reader support [$65] #3337

userosos opened this issue Jun 28, 2019 · 84 comments

Comments

@userosos
Copy link

userosos commented Jun 28, 2019

Issuehunt badges

Hi! Can you add support Fingerprint? My laptop has fingerprint reader i want use it for unblock database.


IssueHunt Summary

Backers (Total: $90.00)

Become a backer now!

Or submit a pull request to get the deposits!

Tips

@droidmonkey
Copy link
Member

It is certainly possible but biometric sensors (especially on laptops) are notoriously terrible. They usually are meant to interoperate with proprietary software written by the laptop vendor and don't offer any functionality beyond that. Windows does have a robust biometrics interface, but that requires the hardware vendor to actually write a driver that works with it.

https://docs.microsoft.com/en-us/windows/desktop/secbiomet/creating-client-applications#manage-credentials

Over in Linux land your mileage can vary even further. MacOS has TouchID which we have already integrated.

@phoerious
Copy link
Member

On Windows we can use Windows Hello.

@userosos
Copy link
Author

userosos commented Jun 29, 2019

@phoerious

On Windows we can use Windows Hello.

Can you make howto?

@droidmonkey
Copy link
Member

Windows hello is the manifestation of the biometrics service. We don't support that right now.

@userosos
Copy link
Author

Windows hello is the manifestation of the biometrics service. We don't support that right now.

Ok. i understand. Do you have an planned for support it?

@droidmonkey
Copy link
Member

Not anytime soon

@goetzc
Copy link

goetzc commented Aug 20, 2019

On GNU/Linux this would be done around fprint which seems to be the thing.

More info:
https://www.freedesktop.org/wiki/Software/fprint/
http://www.linux-pam.org/

@GitHubUser325
Copy link

Please add Support for Windows Hello soon! It's the only missing thing in your beautiful Software <3

@alensiljak
Copy link

Windows-specific support (Hello) is here - #2462.

@droidmonkey droidmonkey changed the title Fingerprint reader support Fingerprint reader support [$20] Dec 24, 2019
@GitHubUser325
Copy link

"droidmonkey changed the title Fingerprint reader support Fingerprint reader support [$20]"

Since I'm not so common with github, what means the [$20]? I am ready to contribute sth, if you can implement the Windows Hello Support :)

@droidmonkey
Copy link
Member

It means there is a bounty on this issue of $20. I was going to add a more substantial bounty to the windows hello and this issue.

@droidmonkey droidmonkey changed the title Fingerprint reader support [$20] Fingerprint reader support [$70] Apr 12, 2020
@andreas512
Copy link

I was also interested in a fingerprint support for keepassxc. How can I contribute to the bounty, in order to push the topic a bit?

@goetzc
Copy link

goetzc commented May 25, 2020

@andreas512 this is the link:
https://issuehunt.io/r/keepassxreboot/keepassxc/issues/3337
(Don't use Bountysource, see below)

@droidmonkey is it possible to integrate BoutySource with GH so that it shows or updates here the current bounty status?

@droidmonkey
Copy link
Member

I am not using bounty source anymore, their platform is broken and they are not investing in it.

@goetzc
Copy link

goetzc commented May 25, 2020

In fact I was getting 500 errors before, it looks like a bit abandoned.

What will happen with all the issue-specific donations?

@droidmonkey
Copy link
Member

droidmonkey commented May 25, 2020

My assumption is they are intact until the site goes away forever. I am no longer sending money through them. We moved to https://issuehunt.io.

@goetzc
Copy link

goetzc commented May 25, 2020

Good to know, then the link for this issue is:
https://issuehunt.io/r/keepassxreboot/keepassxc/issues/3337

@issuehunt-oss
Copy link

issuehunt-oss bot commented May 25, 2020

@goetzc has funded $55.00 to this issue.


@GitHubUser325
Copy link

Would the Contribution be only for the Fingerprint Function, or generally for Windows Hello? I ask, since I use an IR camera with Windows Hello, only Fingerprint Sensor would be of little use..

@goetzc
Copy link

goetzc commented May 26, 2020

@GitHubUser325 for Windows Hello the GitHub issue is #2462 and the IssueHunt bonuty is this.

@jduo
Copy link

jduo commented Jul 2, 2020

@GitHubUser325 are you still working on this issue? I'd be interested in taking it on.

@andreas512
Copy link

@jduo: I don't get the impression from the discussion that GitHubUser325 is working on this issue! I think he is also seeking a solution...
@goetzc: I understand that #2462 is dedicated to a fingerprint solution by Windows Hello - but it is not funded yet.
But which solution is #3337 dedicated to? Would Windows Hello also be an option for this topic here? (already funded!)

I am looking for a solution under Win10 on a HP notebook, so Windows Hello would work fine for me - but I am open for other solutions as well. And I am willing to contribute to the funding.
But which issue is the right one to fund?

@issuehunt-oss
Copy link

issuehunt-oss bot commented Aug 4, 2020

An anonymous user has funded $15.00 to this issue.


@StefanKrapf
Copy link

Hi
I just contributed this topic with $15 to fill the gap to $70.
Sadly the other topic is closed now (#2462), but maybe I have a little piece to a solution for a C++ Library: https://community.bitwarden.com/t/fingerprint-support-all-platforms-to-do-not-re-prompt-the-master-password-all-the-time/143/48
But I really don't know because I'm not a programmer!
But hopefully it can help to fulfill the dream of the Windows Hello solution with fingerprint scanner.
Thanks a lot for your work
Stefan

PS: At the moment, this feature still prevents me from switching from KeePass to KeePassXC!

@issuehunt-oss
Copy link

issuehunt-oss bot commented Jan 4, 2021

An anonymous user has funded $10.00 to this issue.


@smlu
Copy link
Contributor

smlu commented Jan 7, 2021

@andreas512 have you found any solution for Windows Hello support or did you maybe do any work on it?
Btw, I'm currently exploring how Windows Hello could be used to provide bio-metrics based securing of master key on Windows.

@QuAzI
Copy link

QuAzI commented Jul 7, 2021

https://github.com/ShiftMediaProject/libgcrypt ?

@droidmonkey
Copy link
Member

As for windows support, keepassxc depends on libraries that still not available under msvc (libgcrypt) while windows hello support requires WinRT api support, so we really need to wait WinRT support within mingw

We moved to Botan and have a PR in the works to fully support msvc compiler.

@smlu
Copy link
Contributor

smlu commented Jul 8, 2021

windows hello support requires WinRT api support...

Actually there is no need for WinRT. The Win32 API is sufficient, and can be used for WindowsHello key storage.
e.g.: #6029 is implemented that way, using only Win32 API.

@keepassxreboot keepassxreboot deleted a comment from jvl1v5 Jul 8, 2021
@QuAzI
Copy link

QuAzI commented Sep 19, 2021

Still no changes?

@WinkelCode
Copy link

WinkelCode commented Sep 25, 2021

@QuAzI Stuff seems to be happening in #6029 as of 6 days ago.

I am also very interested in fingerprint reader support, already using it on my iPad via a different app and it's very convenient there.

@QuAzI
Copy link

QuAzI commented Nov 10, 2021

Damn. Just found that IssueHunt is abandoned and it is pity. Maybe better to remove links to this platform to prevent donations lose?

Is there any plans to add this feature into milestone 2.7 like #5991? @droidmonkey ?

@droidmonkey
Copy link
Member

Windows Hello integration will be part of 2.7, so yes well have fingerprint support in Windows!

@QuAzI
Copy link

QuAzI commented Jan 1, 2022

Waiting for him more than a gift for the new year

@QuAzI
Copy link

QuAzI commented Mar 22, 2022

Released! But...
Now if fingerprint scanner present KeePassXC forcing to use it.
If 'cancel' pressed I can't unlock DB anymore while password not entered.
Fingerprint ignores Key File. So we lose one protection factor.

@goetzc
Copy link

goetzc commented Mar 22, 2022

I think that’s the case because finger biometric unlock is “quick unlock” and not full unlock.

@tio-trom
Copy link

So no Linux support for the fingerprint reader?

HexF added a commit to HexF/keepassxc that referenced this issue Jan 12, 2023
This commit and subsequent pull request adds support for Quick Unlock on Linux via Polkit
Polkit allows for authentication of many means, including fingerprint scanning fixing Issue keepassxreboot#5991
Furthermore, a common interface for Quick Unlocking has been implemented, and has been replaced throughout to make implementing other mediums easier.
This also fixes keepassxreboot#3337, giving fingerprint reader support to the final major supported platform - Linux.
HexF added a commit to HexF/keepassxc that referenced this issue Jan 12, 2023
This commit and subsequent pull request adds support for Quick Unlock on Linux via Polkit
Polkit allows for authentication of many means, including fingerprint scanning fixing Issue keepassxreboot#5991
Furthermore, a common interface for Quick Unlocking has been implemented, and has been replaced throughout to make implementing other mediums easier.
This also fixes keepassxreboot#3337, giving fingerprint reader support to the final major supported platform - Linux.
@GonzRon
Copy link

GonzRon commented Jun 25, 2023

"brutePrint" sheds some light on fingerprint cracking - not very secure on android, slightly better on iOS due to encrypted chip level communication.
https://www.kaspersky.com/blog/fingerprint-brute-force-android/48303/

@anonymous-user
Copy link

What a shame a Google Pixel wasn't included. I would have liked to know how it'd fare.

HexF added a commit to HexF/keepassxc that referenced this issue Jul 21, 2023
This commit and subsequent pull request adds support for Quick Unlock on Linux via Polkit
Polkit allows for authentication of many means, including fingerprint scanning fixing Issue keepassxreboot#5991
Furthermore, a common interface for Quick Unlocking has been implemented, and has been replaced throughout to make implementing other mediums easier.
This also fixes keepassxreboot#3337, giving fingerprint reader support to the final major supported platform - Linux.
HexF added a commit to HexF/keepassxc that referenced this issue Aug 23, 2023
This commit and subsequent pull request adds support for Quick Unlock on Linux via Polkit
Polkit allows for authentication of many means, including fingerprint scanning fixing Issue keepassxreboot#5991
Furthermore, a common interface for Quick Unlocking has been implemented, and has been replaced throughout to make implementing other mediums easier.
This also fixes keepassxreboot#3337, giving fingerprint reader support to the final major supported platform - Linux.
droidmonkey pushed a commit to HexF/keepassxc that referenced this issue Sep 4, 2023
Closes keepassxreboot#5991
Closes keepassxreboot#3337 - Support fingerprint readers on Linux

Polkit allows for authentication of many means, including fingerprint scanning. Furthermore, a common interface for Quick Unlocking has been implemented, and has been replaced throughout to make implementing other quick unlock strategies easier.

Refactor QuickUnlock to use UUID stored in headers. This is a new feature using the KDBX 4 standard to store a randomly generated UUID in the public headers of the database. This enables identification of KDBX file without relying on path or filename and will eventually support persistent Quick Unlock.
droidmonkey pushed a commit to HexF/keepassxc that referenced this issue Sep 4, 2023
Closes keepassxreboot#5991
Closes keepassxreboot#3337 - Support fingerprint readers on Linux

Polkit allows for authentication of many means, including fingerprint scanning. Furthermore, a common interface for Quick Unlocking has been implemented, and has been replaced throughout to make implementing other quick unlock strategies easier.

Refactor QuickUnlock to use UUID stored in headers. This is a new feature using the KDBX 4 standard to store a randomly generated UUID in the public headers of the database. This enables identification of KDBX file without relying on path or filename and will eventually support persistent Quick Unlock.
droidmonkey pushed a commit to HexF/keepassxc that referenced this issue Oct 14, 2023
Closes keepassxreboot#5991
Closes keepassxreboot#3337 - Support fingerprint readers on Linux

Polkit allows for authentication of many means, including fingerprint scanning. Furthermore, a common interface for Quick Unlocking has been implemented, and has been replaced throughout to make implementing other quick unlock strategies easier.

Refactor QuickUnlock to use UUID stored in headers. This is a new feature using the KDBX 4 standard to store a randomly generated UUID in the public headers of the database. This enables identification of KDBX file without relying on path or filename and will eventually support persistent Quick Unlock.
pull bot pushed a commit to tigerwill90/keepassxc that referenced this issue Oct 24, 2023
Closes keepassxreboot#5991
Closes keepassxreboot#3337 - Support fingerprint readers on Linux

Polkit allows for authentication of many means, including fingerprint scanning. Furthermore, a common interface for Quick Unlocking has been implemented, and has been replaced throughout to make implementing other quick unlock strategies easier.

Refactor QuickUnlock to use UUID stored in headers. This is a new feature using the KDBX 4 standard to store a randomly generated UUID in the public headers of the database. This enables identification of KDBX file without relying on path or filename and will eventually support persistent Quick Unlock.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests