Detect changed biometrics/fingerprint and re-prompt for master password

I would love to vote for this another 19 times if possible. At the moment I’m not comfortable using Touch ID because of the security risk; if “Touch ID to unlock” is enabled, the entire Bitwarden vault can easily be accessed by anyone once the phone is unlocked. It appears that iOS has a straightforward method to detect changes to the Touch ID settings (evaluatedPolicyDomainState), so hopefully this would be a relatively simple revision to the code. It would certainly provide a lot of value… Touch ID to unlock is such a useful feature!

In the meantime, a PIN can be used to unlock Bitwarden in iOS, but that is not completely secure (although it is a lot more secure than Touch ID at the moment):

Keep up the great work! I’m really impressed with Bitwarden so far!

1 Like