Force Fingerprint on Apps

Allen

Hi everyone,
I have two smartphones: an iPhone 17 Pro Max and Google Pixel 9a with GrapheneOS.

On iPhone I can force Face ID also on apps that don’t directly support it (MS Teams, yes, I’m looking at you), so I can use biometric authorization to display their content.

Is there something similar with fingerprints on AOSP/Graphene OS?
Or are perhaps different Profiles the way to go to achieve something similar?
Right now, I don’t use multiple profiles for my apps.
I could reorganize later my workflow, but right now I’m still getting used to the Operating System.

PS: I opened a topic after searching on the forum for previous discussion.
If I missed a thread, sorry.

decadentist

Allen

You could put those apps into the private space in your profile. You need a fingerprint to open your private space, but it grants you access to all apps in it.

Allen

decadentist
Thank you for your answer.
So, with Private Spaces I can install a copy of an already installed app on a clean space protected by biometric authorization that does not share any data with everything outside the space, right? I tried with an app and it’s quite cool.
But I can’t find myself able to put a protected app on the main screen, like any other apps from the menu.
I can only open them from the menu after unlocking the Private Space.

I guess it’s because iOS uses the main screen to list apps (yeah, I know iOS added a sort of app menu on the last page, but it’s clearly an afterthought feature).

Tandara

Allen You can have icons for apps from Private Space by using Third Party launchers like Lawnchair. For me, when I install an app in PS, the icon for it automatically appears on home screen and dock search.

Allen

Tandara Sorry for the late answer.

So that is a feature that is lacking on the AOSP launcher, but not Android-side.

Good to know.
I’m going to try some launchers.

I’ll mark this thread as solved since you answered to all the questions I had.

Thank you!

Novalissoide

Have you tried this app?
https://github.com/PranavPurwar/AppLock/releases

23Sha-ger

Novalissoide
That's an extra attack surface.
Those kinds of apps require acceasibility and overlay permissions, so they can access all contents of any other app.

Tandara

23Sha-ger I agree. Apps like this that are not integrated into system can fail at any time. Not using it is better than having a failure when you need it the most.

Novalissoide

23Sha-ger Yes you're totally right about that. I missed that even though it doesn't require 'accessibility', the other option (except Shitzuku 😿) is 'usage access'. All three options seems to be exploits. Thanks buddy

DeletedUser495

23Sha-ger what are they going to do with the contents they may have gathered if they can't use network and Play Services are not present. Do not over exaggerate what apps can do when they miss vital dependencies.

23Sha-ger

DeletedUser495
They don't have to. If you can gain IPC communication with the said app, or similar side channels like the recent TapTrap:
https://taptrap.click

This makes little sense to use a hardened OS and then pollute it with gimmicks that provide questionable benefits, if any.

DeletedUser495

23Sha-ger extreme scenarios are possible but you need to stop dreaming it happens in every case and especially among foss apps which are auditable.