6fad5c67b6
* Expand release notes about browser permission upgrade in v1.48.0. By including the text of the dialogs, users can Google the message they see in the somewhat scary looking browser permissions dialog, and land here on the official documentation. * Expand info about browser permissions for Unlock with Biometrics. By including the text of the dialogs, users can Google the message they see in the somewhat scary looking browser permissions dialog, and land here on the official documentation. * Expand security FAQ about nativeMessaging browser permission. By including the text of the dialogs, users can Google the message they see in the somewhat scary looking browser permissions dialog, and land here on the official documentation.
6.7 KiB
layout, title, categories, featured, popular, tags, order
| layout | title | categories | featured | popular | tags | order | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| article | Unlock with Biometrics |
|
false | false |
|
06 |
Bitwarden can be configured to accept biometrics as a method to unlock your Vault. Biometrics can only be used to unlock your Vault, you will still be required to log in to your Vault with your Master Password and any enabled [Two-step Login method]({% link _articles/two-step-login/setup-two-step-login.md %}).
Biometric features are part of the built-in security in your device and/or operating system. Bitwarden leverages native APIs to perform this validation, and as such does not receive any biometrics information from the device.
Mobile Applications
Biometric Unlock is supported for both the Android (Google Play or FDroid) and iOS Mobile Applications:
- For Android, via fingerprint unlock{:target="_blank"} or face unlock{:target="_blank"}.
- For iOS, via Touch ID{:target="_blank"} and Face ID{:target="_blank"}.
Enable Biometric Unlock in Mobile
Complete the following steps to enable Biometric Unlock in your Mobile App:
{% callout info %} Your Biometric method of choice must be enabled on your device or operating system before it can be enabled in Bitwarden. {% endcallout %}
- Open your Settings tab.
- In the Security section, your available Biometrics options will be listed. Tap the Biometric method you would like to enable:
{% image /biometrics/ios_faceid.jpeg Enable Face ID in iOS%}
A green Enabled status will appear when activated. Once Biometric Unlock is enabled, your device will automatically prompt for your biometric data when unlocking the app.
Desktop Applications
Biometric Unlock is supported for both the Windows and macOS Desktop Applications:
- For Windows, via Windows Hello{:target="_blank"} using PIN, Facial Recognition, or other hardware that meets Windows Hello biometric requirements{:target="_blank"}.
- For macOS, via Touch ID{:target="_blank"}.
Enable Biometric Unlock in Desktop
Complete the following steps to enable Biometric Unlock in your Desktop App:
{% callout info %} Your Biometric method of choice must be enabled on your device or operating system before it can be enabled in Bitwarden. {% endcallout %}
-
Open your Settings (on Windows, File → Settings) (on macOS, Bitwarden → Preferences).
-
In the Security section, your available Biometrics options will be listed as checkbox items. Check the Biometric method you would like to enable:
{% image /biometrics/windows.png Configuring Hello in Windows %}
{% callout info %} If you do not see the option to enable Windows Hello within the Desktop preferences, you may need to install the Microsoft Visual C++ Redistributable. {% endcallout %}
Once Biometric Unlock is enabled, a new button will be presented on the Unlock screen. Selecting this button (for example, Unlock with Windows Hello) will initiate unlock. You may at any time choose to unlock your Vault with your Master Password instead.
{% image /biometrics/hello-unlock.png Unlock with Windows Hello %}
Browser Extensions
{% callout warning %} Version 1.48.0 of the browser extension enables Unlock with Biometrics, if you have at least version 2021-01-19 of the desktop app.
Note that when your browser updates to this version, you may be asked to accept a new permission called "communicate with cooperating native applications" (in Chromium-based browsers), or "exchange messages with programs other than Firefox." If you don't accept this permission, the extension will remain disabled.
This permission, also known as nativeMessaging, is safe to accept and enables the browser extension to communicate with the Bitwarden desktop app, which is required to enabled Unlock with Biometrics, as described in this section.
{% endcallout%}
Biometric Unlock is supported for Firefox and Chromium-based (i.e. Chrome, Edge) Bitwarden Browser Extensions by integration with a native Bitwarden Desktop App. Through the Desktop App's access to Biometric APIs, Browser Extensions support Biometric Unlock:
- For Windows, via Windows Hello{:target="_blank"} using PIN, Facial Recognition, or other hardware that meets Windows Hello biometric requirements{:target="_blank"}.
- For macOS, via Touch ID{:target="_blank"}.
The Bitwarden Desktop Application must be installed, logged in, and running in order to use Biometric Unlock in a Browser Extension. Additionally, you will need to enable Biometric Unlock in the desktop app before proceeding.
Enable Biometric Unlock for Browser Extensions
Complete the following steps to enable Biometric Unlock in your Browser Extension:
-
In the Desktop App, navigate to Settings (on Windows, File → Settings) (on macOS, Bitwarden → Preferences).
-
Check the Enable Browser Integration checkbox.
-
In the Browser Extension, open the Settings tab.
-
Check the Unlock with biometrics checkbox.
To validate a secure channel, a
Desktop sync verificationdialog box will appear in your Browser Extension and aVerify browser connectiondialog box will appear in your Desktop Application. -
Validate that the displayed [account fingerprint]({% link _articles/features/fingerprint-phrase.md %}) matches in both locations. If they match, select the Approve button and input your Biometric authentication method.
You will be required to re-validate each time either the Desktop App or Browser Extension is restarted.
Once Biometric Unlock is enabled, a new button will be presented on the Unlock screen. Selecting the Unlock biometrics button will initiate unlock via the Desktop App.
{% callout warning %} If you attempt to use Biometric Unlock when the Desktop App is closed, you will be prompted to open the Desktop App and redo the fingerprint validation handshake described in this section. {% endcallout %}