hegocre / hegocre/NextcloudPasswords
Allow Biometrics without PIN
Nobody has claimed this yet.
- Dominant language
- Kotlin
- Stars
- 83
- Forks
- 7
- Avg merge
- 1d 10h
- Merged PRs (30d)
- 7
Description
Checklist
- I have checked and there are no existing issues - open or closed - which request the same feature.
- I have taken the time to fill in all the required details. I understand that the feature request will be dismissed otherwise.
- This issue contains only one feature request.
Feature description
I'd like to enable biometrics without having a backup PIN.
Why do you want this feature?
I don't see the benefit of forcing a PIN. If the biometrics do not work and I am locked out of the app I could just reset the app. And since the PIN limited to 9 digits could it be brute forced?
Additional information
No response
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the Android authentication flow and how biometric access is coupled to the backup PIN. Review the security implications and existing app-reset behavior before proposing a change. Done means biometrics can be enabled without configuring a PIN while the app remains recoverable and appropriately protected.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- android, kotlin
- Domain
- authentication, mobile, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100