"Raskere BankID": BankID (Norway) bans passwordless sign-in on GrapheneOS

DeletedUser370

Out of curiosity, I temporarily set my default web browser to Brave, and I could reactivate "BankID with screen lock" successfully.

pj65

BankID worked with fingerprint id for an hour. Then i received an sms that my bankid had been revoked and all access to my bank accounts was blocked. Had to meet up in my bank to get access to bank accounts again. They said a security bot had registered a posssible cyber attack on my account. Pixel 9a 2025080600

p-marg

I have used "Faster BankID" on multiple occasions, no issues to report having Vanadium as the default browser, can confirm it works.

p-marg

BankID FAQ:

Some Android devices lack technical support, or so‑called “key attestation,” which is required to enable biometrics. This is when Google verifies the security of key management. For example, if you modify the phone yourself, it can happen that Google is unable to vouch for it.

https://bankid.no/hjelp-bankid-app

This FAQ statement feels incomplete, and it suggests that I should keep sending them feedback every few months about adding support for GrapheneOS.

fid03

This feature still works completely fine on GrapheneOS, but seems to require Google's credential service to be enabled in order to function when Vanadium is set as your default web browser. I had to go to the Settings app > Passwords, passkeys & accounts > enable "Google" in order to activate the feature last week.

I think the Play services dialog claimed that the passkey gets saved to your Google account, but when I checked my Google account settings later it didn't actually sync any passkey related to that.

The app uses a custom tab for this feature, and custom tabs share state with the default web browser. I didn't have to change any settings in Vanadium.

Funny thing, Vanadium now offered me to store the passkey in one of my password managers, or on a security key using the app HW Fido2 Provider. That didn't actually work though, so I'm assuming storing the passkey externally gets blocked by BankID.

To be clear, this feature is now called "BankID med biometri".

twine6148

I've run into a bit of a headache here. I use a self hosted bitwarden instance for passwords. Unfortunately, bitwarden now supports passkeys as well, but is not compatible with bankid with biometrics, while google password manager is.

I've worked around this by using obtainium to install bitwarden, and locked the release to version 2024.4.0, which is the last bitwarden release to not support passkeys. This successfully "falls back" to Google password manager for passkeys, including bankid.

Just putting this out there. I'll request an option on GitHub for bitwarden to offer a way to disable passkeys.

AcclaimSublevel19

twine6148 Perhaps you can set Google as the preferred autofill service in Settings and Bitwarden as an additional one? I think only the preferred one handles passkeys, while you'll still get autofill suggestions for Bitwarden logins.

fid03

twine6148 Works completely fine for me with Proton Pass – which also supports passkeys – set as the preferred service in Settings > Passwords, passkeys & accounts, and Google set as a secondary service. Weird that it doesn't work for you.

AcclaimSublevel19 I think only the preferred one handles passkeys, while you'll still get autofill suggestions for Bitwarden logins.

Both preferred and secondary ones are able to handle passkeys. You can generally choose between them when you sign in with or register passkeys.

fid03

twine6148 Which web browser is set as the default web browser? Settings > Apps > Default apps > Web browser. Try setting it to Vanadium.

« Previous Page