diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2022-05-09 17:49:44 -0400 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2022-05-09 17:49:44 -0400 |
| commit | 7d8ab16d9da1b8868b305447d04673c67ac5c789 (patch) | |
| tree | 4ef6263cb761a08b7fa3cde54ff56bebd8e5ebd9 | |
| parent | d9d370dd83c56ad7b2884b5f8f81ceb86e214c07 (diff) | |
split out fingerprint unlock section
| -rw-r--r-- | static/features.html | 22 |
1 files changed, 17 insertions, 5 deletions
diff --git a/static/features.html b/static/features.html index 55e77e64..0661fde1 100644 --- a/static/features.html +++ b/static/features.html @@ -118,6 +118,8 @@ <li><a href="#pin-scrambling">PIN scrambling</a></li> <li><a href="#supports-longer-passwords">Supports longer passwords</a></li> + <li><a href="#more-secure-fingerprint-unlock">More secure fingerprint + unlock</a></li> <li> <a href="#improved-user-profiles">Improved user profiles</a> <ul> @@ -600,6 +602,21 @@ digit PIN.</p> </section> + <section id="more-secure-fingerprint-unlock"> + <h4><a href="#more-secure-fingerprint-unlock">More secure fingerprint unlock</a></h4> + + <p>GrapheneOS improves the security of the fingerprint unlock feature by only + permitting 5 total attempts rather than implementing a 30 second delay between + every 5 failed attempts with a total of 20 attempts. This doesn't just reduce + the number of potential attempts but also makes it easy to disable fingerprint + unlock by intentionally failing to unlock 5 times with a different finger.</p> + + <p>GrapheneOS also adds support for using the fingerprint scanner only for + authentication in apps and unlocking hardware keystore keys by toggling off + support for unlocking. This feature already existed for the standard Android + face unlock feature.</p> + </section> + <section id="improved-user-profiles"> <h3><a href="#improved-user-profiles">Improved user profiles</a></h3> @@ -658,11 +675,6 @@ <li>Improved user visibility into persistent firmware security through version and configuration verification with reporting of inconsistencies and debug features being enabled.</li> - <li>Stricter implementation of the optional fingerprint unlock feature permitting - only 5 attempts rather than 20 before permanent lockout (our recommendation is - still keeping sensitive data in user profiles without fingerprint unlock)</li> - <li>Support for using the fingerprint scanner only for authentication in apps - and unlocking hardware keystore keys by toggling off support for unlocking.</li> <li>Vanadium: hardened WebView and default browser — the WebView is what most other apps use to handle web content, so you benefit from Vanadium in many apps even if you choose another browser</li> |