Buffed up Biometrics
summary
Android replaces FingerprintManager with the BiometricPrompt API (framework API 28+) and an AndroidX compat alpha2 that backports behavior to API 23, centralizing UI/permission handling and removing the old help callback. Two authenticate paths exist: a simple unlock and a crypto-bound authenticate that ties keys/signatures to user consent. Cancellation is single-use, callbacks are succeeded/failed/error (terminal), and research shows GAN-generated “masterprints” can unlock ~1 in 5 readers. Sample code and flows live on the linked GitHub.
AI-written summary · about
chapters (21)
- 0:00Introduction and speaker intro
- 1:48What are biometrics
- 3:37Biometrics in security
- 5:25Old fingerprint manager deprecated
- 6:30Biometric Prompt API overview
- 9:17Triggering authentication
- 11:04Cancellation signal explained
- 11:46Crypto objects and security
- 12:51Authentication callbacks
- 14:59Biometric Prompt in action
- 16:25API level limitations
- 17:07AndroidX Biometric Prompt differences
- 19:12Prompt info and title setup
- 20:37AndroidX Biometric Prompt demo
- 21:48Handling older devices
- 22:33First-time user authentication flow
- 25:03Main authentication flow
- 26:10Future of Biometric Prompt
- 27:34Stability and resources
- 28:36Demo project and slides
- 29:22Q&A session
related talks
45mOverview of Biometric Auth
37mTo Protect And Confirm
30mAdvanced Android Fingerprint Security
26mMobile UX Best Practices for Passkeys
22mCommunicating Device Confidence Level and Upcoming Re-Authentications in Continuous
13mFuture-Proofing Authentication: From Biometric Logins to Passkeys with WebAuthn
19mProtecting Your Users in an Agentic World
30mSecurity at your fingertips