biometric authentication
Biometric authentication can authorize a local operation through the operating system.
Use this when A sensitive local action needs device-user verification.
without the term
“I want users to unlock the app with Face ID instead of typing their password. Is that enough to secure their account, or what else do I need?”
with the term · How do you ask a model for biometric authentication?
Gate this local credential use with the platform’s biometric policy. Test cancellation, fallback, and changed enrollment without treating the result as remote account authorization.
What is biometric authentication?
Face ID, Touch ID, or a fingerprint confirms the person holding the device. Use it to unlock a key stored in secure storage. On its own it says nothing to your server about the account.
Why does biometric authentication matter when vibe coding?
A successful local prompt can be mistaken for server-side account authorization.
How do you do biometric authentication?
Use the platform authentication and key-access policy with explicit fallback and invalidation behavior.
What goes wrong with biometric authentication?
Showing a biometric prompt while the protected key remains accessible without it.