yellow-leaves I would be very interested in seeing how easy or difficult this to literally clone a fingerprint on a pixel 8 fingerprint scanner, I don't think it's that likely. I think it would be more likely that you are forced into using your fingerprint.
A good solution would be to have, after five or three wrong fingerprints, then have the pin code kick in with duress pass on.
But I am genuinely interested. Is it easy to copy a fingerprint and use that on the phone?
peroxide7881
Was a famous demonstration years ago, reconstructing the print from photographs taken at a press conference, to prove the point to the German defence minister
https://www.forbes.com/sites/paulmonckton/2014/12/30/hacker-clones-fingerprint-from-photograph/
peroxide7881 This would entirely defeat the purpose of the feature. You can already use regular fingerprint unlock with the usual limit of 5 failed attempts.
Carlos-Anso
Thanks for sharing that article, Carlos! It's fascinating to learn about the potential of fingerprint cloning, although it sounds like it's not quite as simple as it might seem.
This made me look up what sensor the Pixel 8 and older models use, and it turns out to be optical fingerprint sensors. These don't have the same liveness detection or 3D imaging capabilities as the ultrasonic sensors found in the Pixel 9. This means that they're theoretically more vulnerable to spoofing attacks using high-quality replicas.
So I guess that while cloning a fingerprint from a photo is possible, it's very difficult and would only be important for super high threat model individuals. Correct me if wrong.
Thanks for the response! I understand your point about the 5 failed attempt limit, but in practice (as a GOS user myself), you can do 3 failed attempts, press the standby button, and then do another 3 failed attempts before the device forces you to use your PIN or passphrase.
This effectively allows 6 failed attempts in total, which has been the existing behavior in GrapheneOS. My suggestion is that the new 2FA PIN feature could be enhanced by making it configurable as a fallback after a cumulative number of failed attempts (e.g., after 3). This would allow users with lower threat models to avoid having to always use both fingerprint and the 2FA PIN for every unlock, while still maintaining robust security protections. And those who wish to always have the 2FA PIN could still do that.
Would love to hear thoughts on whether this could be implemented as part of the new 2FA system or what your views on that are. I do not see it defeating the purpose entirely as you describe it.
peroxide7881 So I guess that while cloning a fingerprint from a photo is possible, it's very difficult and would only be important for super high threat model individuals
You also leave your fingerprints all over everything you touch.
People 3d print fingerprints to fool sensors. I presume it would be possible to select print materials that would work with any type of sensors. With a bit of practice likely to be quick, easy and cheap to create a fingerprint.
Its the reason a lot of people with higher threat models avoid using fingerprint unlock and another reason 2F fingerprint/PIN unlock is valuable.
Carlos-Anso I definitely agree with you that this feature is valuable! There is no debating that.
I was merely suggesting another middle ground option for those who have a lower threat model that could be implemented within this new feature. :)
Can we have the PIN confirm auto?
0289380427 +1 for auto PIN confirm. The numpad opens only after a successful finger print read.
Been using this feature for the past week, love it GrapheneOS team, thank you!
0289380427 If I correctly understand "PIN confirm auto", I'd guess it would weaken the security of the PIN. Forcing the entry of "end of line" seems much more exacting.
Please don't do this.
(I suppose the auto PIN confirm could be made a configurable option - at the cost of complexity)
I think there is a bug with the 2fa when I end the secondary profile session and the owner profile lockscreen shows first a fingerprint icon but it doesn't respond to touch. It does that every time I switch back to owner profile. I have to turn the screen off and on first and then it asks for a password. P7 2024123000 stable
NetRunner88 I have a Pixel 7 ( IIRC tried 2 different mfg screen protectors ) and just could not make it work at all. The Pixel 7 I tried over and over again with numerous fingers and my other hand and it just doesn't work with me. So I researched the Pixel 8 and 9. The Pixel 9 was on sale and also had great trade in values a few weeks ago and I really wanted the fingerprint option. The Pixel 9 works very well.
0289380427 if I understand the question correctly, the project account already answered here: https://discuss.grapheneos.org/d/18585-2-factor-fingerprint-unlock-feature-is-now-fully-implemented/46
Carlos-Anso Right, we had carried out tests on a door lock with a fingerprint. The matching fingerprints were directly around the lock. :)
Excellent feature. Great job devs!
I wanted to report that I've observed 4 instances of the PIN portion of the 2FA process not appearing after fingerprint acceptance. Pixel 7.
The first two were a fews days apart, on OS 20241230.
The second two were in immediate succession about 1 minute appart on the latest OS 2025010700 - I received a notification, applied fingerprint and the phone immediately unlocked without asking for PIN. I finished what I was doing, put the phone down and about minute later received another notification and the same thing happened again when I picked up the phone and applied fingerprint to unlock - no pin requested. When I tried to replicate this a 3rd time, the 2FA worked as expected.
I'm not sure what may be causing the 2FA to not work in these 4 instances out of hundreds of unlocks since I turned the feature on.
I have the screen timeout set to 30 seconds, and its set to lock 5 seconds after that.
I tried "unlocking" in this 5 second buffer when the screen is off. Tapping anywhere on the black screen will immediately spring it back to life (as expected). If I instead happen to use my fingerprint on the sensor, the same thing occurs, but it shows the fingerprint animation (white light under the sensor location) , which makes it appear as though it accepted my fingerprint and "unlocked" but in reality its just waking the device back up before it locks in that 5 second window.
It's possible that this is what I've observed on these 4 occassions - I catch the device in that 5 second buffer where the screen is off, but it hasnt locked itself yet. When I go to "unlock" my phone with fingerprint as is muscle memory, it simply wakes the device back up, while making it appear as though it accepted a finger print in the process.
With this behaviour in mind, I'll keep a close eye on it to confirm if there are any instances of true unlock without a PIN.
