I really like the convenience of using fingerprint unlock for lockscreen and password manager. I do however don’t like the thought of being forced to unlock both physically.

I use Android with GrapheneOS.

I have set up lockdown, but it takes some time to hold the power button and then click lockdown.

Any creative solutions?

  • CubitOom@infosec.pub
    link
    fedilink
    English
    arrow-up
    14
    ·
    edit-2
    2 hours ago

    As others have said, the most secure option is to not use biometrics.

    However an app like private lock might be a decent compromise

    Edit: I just noticed that private lock seems to not have a new release in a few years and should probably be considered orphaned. So I might recommend ParanoidsPal-PrivacyLock instead

    • smeg@feddit.uk
      link
      fedilink
      English
      arrow-up
      2
      ·
      3 hours ago

      Requirements - Device admin permission for locking screen.

      Does this mean it requires root access (which brings additional security concerns) or just that a non-restricted user needs to set it up?

      • CubitOom@infosec.pub
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 hours ago

        It doesn’t require root. Device admin is different.

        I currently run this app on android 15 without root and it runs very well. However I just noticed that it seems to not have a new release in a few years and should probably be considered orphaned. So I might recommend ParanoidsPal-PrivacyLock instead.

    • swelter_spark@reddthat.com
      link
      fedilink
      English
      arrow-up
      3
      ·
      13 hours ago

      I use Paranoid’s Pal, a similar app. It’s great. In addition to locking in response to motion, I have it set to automatically lock the phone a few minutes after the screen turns off.

      • smeg@feddit.uk
        link
        fedilink
        English
        arrow-up
        2
        ·
        3 hours ago

        automatically lock the phone a few minutes after the screen turns off

        Isn’t the default behaviour of phones to lock as soon as the screen turns off?

        • swelter_spark@reddthat.com
          link
          fedilink
          English
          arrow-up
          1
          ·
          58 minutes ago

          You can set your phone to do that, of course, but I prefer not to have to unlock mine when I’ve just used it.

        • CubitOom@infosec.pub
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 hours ago

          Im not an android dev but I think the difference here is it’s a secure lock. Which means that encryption is engaged and requires the decryption string to unlock which means that biometrics are not asked for.

      • MoonlightFox@lemmy.worldOP
        link
        fedilink
        English
        arrow-up
        1
        ·
        3 hours ago

        This also seems nice. I’ll probably test this one as well. I like the lock after x amount of time feature. The pictures have max 15 minutes, so that might be too little, but maybe it’ll work

    • MoonlightFox@lemmy.worldOP
      link
      fedilink
      English
      arrow-up
      6
      ·
      16 hours ago

      Great app, just installed it. The default amount of movement is perfect. Now it’s really easy to prevent being physically forced to unlock, and theft

    • Einar@lemm.ee
      link
      fedilink
      English
      arrow-up
      2
      ·
      16 hours ago

      Isn’t this basically the same as Android’s theft detection lock?

      • CubitOom@infosec.pub
        link
        fedilink
        English
        arrow-up
        1
        ·
        15 hours ago

        I am running stock Android and have no idea what that is. But this forces your phone to use your none biometrics unlock after it senses acceleration.