Overview of Biometric Auth
summary
Covers concrete Android versions and APIs: API 23 fingerprint manager requires you to supply UI and check isHardwareDetected/hasEnrolled (fragile on some old devices), biometric prompt system UI arrives in API 28 but canAuthenticate only exists on API 29, Pixel 4 is face‑only and older Samsung devices break face/iris flows. Recommends crypto object with userAuthenticationRequired=true to tie keys to biometrics, mentions key attestation/StrongBox, and notes AndroidX biometric RC2 fallback and device blacklist to handle OEM quirks.
AI-written summary · about
chapters (9)
- 0:00Introduction and disclaimer
- 1:48Legacy fingerprint APIs
- 8:09Fingerprint UI and callbacks
- 13:45Crypto object and security
- 19:23Biometric prompt APIs
- 27:05AndroidX biometric library
- 36:22Crypto object setup details
- 41:39Key attestation and best practices
- 43:02Resources and takeaways
related talks
33mBuffed up Biometrics
37mTo Protect And Confirm
30mAdvanced Android Fingerprint Security
52mAuthentication, Authorization, and You...
26mPasswordless Future!!
13mFuture-Proofing Authentication: From Biometric Logins to Passkeys with WebAuthn
38mThe Present and Future of Standardized Authentication Specifications You Can Experience on Android/Chrome
21mBiometric Authentication, the Zebra way