Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Can mobile website have biometric authentication?

I have mobile website and in this application I want to use device's native PIN, Faceid and Fingerprint authentication, is this practically somehow possible? because I don't think browser would allow me something like that.

Also I heard that if I want to have this kind of behaviour, I should create PWA(progressive web app). So is it true that from browser(without PWA) I can't use any of these three authentication types and that PWA will give me opportunity to use all of them?

like image 896
O. Shekriladze Avatar asked Jul 27 '20 09:07

O. Shekriladze


People also ask

What is mobile biometric authentication and how does it work?

Let us discuss that in the following sections. In simple terms, mobile biometric authentication is a form of authentication that uses biometrics to detect and authenticate the identity of the user trying to access a mobile app. It can be performed using multiple ways including fingerprint readers, facial recognition, voice recognition, and more.

How difficult is it for hackers to access biometric data?

And it is extremely difficult for hackers to access biometric factors. Biometric authentication for mobile devices makes it even more difficult for hackers to access these factors, because the biometric data is only stored locally.

Are biometrics a legal issue for mobile devices?

The focus of current legal concerns is related to other forms of biometrics, such as employee time clocks, but these issues could easily spill over to mobile devices. The trajectory of enterprise mobility is moving at lightning speed toward a greater reliance on biometrics.

Is biometric authentication with React-Native-keychain suitable for critical applications?

Though biometric authentication with react-native-keychain is suitable for critical applications, there are a few caveats I would like to bring to your attention: There is no passcode fallback. You may receive a requirement to allow the user to authenticate with their device passcode.


1 Answers

Yes the Web Authentication API is available, which allows you to delegate authentication to the device's authenticators, including common mobile authenticators such as fingerprints or face ID. Your server application will need to support this method of authentication as well, so keep that in mind.

All modern browsers have supported Web Authentication API for a while now.

You can try out a demo and view code examples here: https://webauthn.io

like image 51
Mark Avatar answered Sep 25 '22 14:09

Mark