1b8c9e53f7
* q1 release additions & extras * saml samples addition * safari app extension note * invitation validity
6.0 KiB
layout, title, categories, featured, popular, tags, order
| layout | title | categories | featured | popular | tags | order | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| article | Unlock with Biometrics |
|
false | false |
|
06 |
Bitwarden can be configured to accept biometrics as a method to unlock your Vault. Biometrics can only be used to unlock your Vault, you will still be required to log in to your Vault with your Master Password and any enabled [Two-step Login method]({% link _articles/two-step-login/setup-two-step-login.md %}).
Biometric features are part of the built-in security in your device and/or operating system. Bitwarden leverages native APIs to perform this validation, and as such does not receive any biometrics information from the device.
Mobile Applications
Biometric Unlock is supported for both the Android (Google Play or FDroid) and iOS Mobile Applications:
- For Android, via fingerprint unlock{:target="_blank"} or face unlock{:target="_blank"}.
- For iOS, via Touch ID{:target="_blank"} and Face ID{:target="_blank"}.
Enable Biometric Unlock in Mobile
Complete the following steps to enable Biometric Unlock in your Mobile App:
{% callout info %} Your Biometric method of choice must be enabled on your device or operating system before it can be enabled in Bitwarden. {% endcallout %}
- Open your Settings tab.
- In the Security section, your available Biometrics options will be listed. Tap the Biometric method you would like to enable:
{% image /biometrics/ios_faceid.jpeg Enable Face ID in iOS%}
A green Enabled status will appear when activated. Once Biometric Unlock is enabled, your device will automatically prompt for your biometric data when unlocking the app.
Desktop Applications
Biometric Unlock is supported for both the Windows and macOS Desktop Applications:
- For Windows, via Windows Hello{:target="_blank"} using PIN, Facial Recognition, or other hardware that meets Windows Hello biometric requirements{:target="_blank"}.
- For macOS, via Touch ID{:target="_blank"}.
Enable Biometric Unlock in Desktop
Complete the following steps to enable Biometric Unlock in your Desktop App:
{% callout info %} Your Biometric method of choice must be enabled on your device or operating system before it can be enabled in Bitwarden. {% endcallout %}
-
Open your Settings (on Windows, File → Settings) (on macOS, Bitwarden → Preferences).
-
In the Security section, your available Biometrics options will be listed as checkbox items. Check the Biometric method you would like to enable:
{% image /biometrics/windows.png Configuring Hello in Windows %}
{% callout info %} If you do not see the option to enable Windows Hello within the Desktop preferences, you may need to install the Microsoft Visual C++ Redistributable. {% endcallout %}
Once Biometric Unlock is enabled, a new button will be presented on the Unlock screen. Selecting this button (for example, Unlock with Windows Hello) will initiate unlock. You may at any time choose to unlock your Vault with your Master Password instead.
{% image /biometrics/hello-unlock.png Unlock with Windows Hello %}
Browser Extensions
Biometric Unlock is supported for Firefox and Chromium-based (i.e. Chrome, Edge) Bitwarden Browser Extensions by integration with a native Bitwarden Desktop App. Through the Desktop App's access to Biometric APIs, Browser Extensions support Biometric Unlock:
- For Windows, via Windows Hello{:target="_blank"} using PIN, Facial Recognition, or other hardware that meets Windows Hello biometric requirements{:target="_blank"}.
- For macOS, via Touch ID{:target="_blank"}.
{% callout info %} The Bitwarden Desktop Application must be installed, logged in, and running in order to use Biometric Unlock in a Browser Extension. Additionally, you will need to enable Biometric Unlock in the desktop app before proceeding. {% endcallout %}
Enable Biometric Unlock for Browser Extensions
Complete the following steps to enable Biometric Unlock in your Browser Extension:
-
In the Desktop App, navigate to Settings (on Windows, File → Settings) (on macOS, Bitwarden → Preferences).
-
Check the Enable Browser Integration checkbox.
-
In the Browser Extension, open the Settings tab.
-
Check the Unlock with biometrics checkbox.
To validate a secure channel, a
Desktop sync verificationdialog box will appear in your Browser Extension and aVerify browser connectiondialog box will appear in your Desktop Application. -
Validate that the displayed [account fingerprint]({% link _articles/features/fingerprint-phrase.md %}) matches in both locations. If they match, select the Approve button and input your Biometric authentication method.
You will be required to re-validate each time either the Desktop App or Browser Extension is restarted.
Once Biometric Unlock is enabled, a new button will be presented on the Unlock screen. Selecting the Unlock biometrics button will initiate unlock via the Desktop App.
{% callout warning %} If you attempt to use Biometric Unlock when the Desktop App is closed, you will be prompted to open the Desktop App and redo the fingerprint validation handshake described in this section. {% endcallout %}