Jump to content
Enpass Discussion Forum

Fingerprint support on Linux


d1900
 Share

Recommended Posts

Just bought a Lenovo laptop with a fingerprint reader that works great for logging in. I would love to be able to use it for Enpass!

Happy to be a beta tester or work with the engineers to develop the feature (I'm a programmer)

  • Like 4
Link to comment
Share on other sites

  • 2 months later...
  • 4 weeks later...

Hello,

I'm using Xubuntu 18 (a distro based on Ubuntu with XFCE), and I'm interested by fingerprint reader too. A few reader are supported by linux, you may look at fprintf project:

https://fprint.freedesktop.org/

I'm looking for such USB reader, the only one that seems well suported is the Eikon mini USB:

https://gitlab.freedesktop.org/libfprint/libfprint/-/issues/260

https://www.amazon.com/gp/product/B007P5J4H8

In parallel, I'm using for years a password keeper, first I used Keepass, an when I switched to Linux a year ago, I used KeepassXC.

For convenience, I would rather want to use a fingerprint reader instead of a password for unlock my password database, but KeepassXC doesn't allow it.

I looked for free alternative that can use a fingerprint reader to unlock database, but I didn't find it. Only Enpass seems to be native on linux and (?) can use a fingerprint reader.

So my question is:

Can Enpass is able to be used with a -working- fingerprint reader on linux ?

Usually I try to use free software in priority, but if Enpass works as I expect I'm ready to buy a perpetual licence ;)

Thanks a lot in advance.

 

Pascal

  • Like 1
Link to comment
Share on other sites

  • 4 months later...
On 11/22/2020 at 4:11 PM, pilou said:

Hello,

(...) few reader are supported by linux, you may look at fprintf project:

https://fprint.freedesktop.org/

(...)

Can Enpass is able to be used with a -working- fingerprint reader on linux ?

Usually I try to use free software in priority, but if Enpass works as I expect I'm ready to buy a perpetual licence ;)

Thanks a lot in advance.

Hello everybody,

I hope you're doing well, especially in theses troubled days due to the Covid pandemic...

Since my last message here, I saw new versions of Enpass has been released. How about working finger print reader on linux ? ;)

Thanks a lot in advance, and God bless you.

Pascal

  • Like 1
Link to comment
Share on other sites

  • 2 weeks later...
On 11/22/2020 at 9:11 AM, pilou said:

Hello,

I'm using Xubuntu 18 (a distro based on Ubuntu with XFCE), and I'm interested by fingerprint reader too. A few reader are supported by linux, you may look at fprintf project:

https://fprint.freedesktop.org/

I'm looking for such USB reader, the only one that seems well suported is the Eikon mini USB:

https://gitlab.freedesktop.org/libfprint/libfprint/-/issues/260

https://www.amazon.com/gp/product/B007P5J4H8

In parallel, I'm using for years a password keeper, first I used Keepass, an when I switched to Linux a year ago, I used KeepassXC.

For convenience, I would rather want to use a fingerprint reader instead of a password for unlock my password database, but KeepassXC doesn't allow it.

I looked for free alternative that can use a fingerprint reader to unlock database, but I didn't find it. Only Enpass seems to be native on linux and (?) can use a fingerprint reader.

So my question is:

Can Enpass is able to be used with a -working- fingerprint reader on linux ?

Usually I try to use free software in priority, but if Enpass works as I expect I'm ready to buy a perpetual licence ;)

Thanks a lot in advance.

 

Pascal

I just wanted to chime in as a technically savvy user to note that fingerprint reading is in mobile using simple secure apis while desktop platforms don't have such.

On iPhone and Android the biometrics API doesn't just read your fingerprint, it's connected to a secure crypto chip (slightly oversimplified terminology for those more familiar), this chip processes the finger prints and unlocks crypto keys when they match. The chip itself is designed to never directly unlock crypto keys otherwise and to even be tamper resistant (ie. if someone tries to physically access the chip it wipes itself).

However, on desktop environments the fingerprint readers largely just read fingerprints. While this can verify your identity, a fingerprint alone can not be used for encryption.

You pretty much have 2 ways about this on desktop environments:

* Dedicated security hardware (a reader that's set up like the mobile readers)
* You have to store the database key unencrypted (or effectively unencrypted)

A good relatively easy middle ground might be to make a feature for Enpass to unlock via only a keyfile? Doing this you could use a biometric usb drive (they don't act as a fingerprint reader for the computer usually and instead use a reader to enable access to the drive contents)

  • Like 1
Link to comment
Share on other sites

  • 5 months later...

Currently Enpass supports fingerprint on all of its supported platforms except Linux. I don't think there's currently any other password manager that supports fingerprint readers at all, so Enpass has potential to be the first ;) Perhaps it's niche, but I would certainly use it if it were there, it's already quite convenient on Android and Windows :)

  • Like 1
  • Thanks 2
Link to comment
Share on other sites

  • 4 months later...
  • 3 months later...
  • 7 months later...

Nothing yet?
I'm a Enpass Pro User who formerly used Enpass on my MacBook in combination with my Android phone (just don't want ios) and was pretty happy how this setup was working.
Now I switched to a Framework Laptop (https://frame.work) with Ubuntu 22.10 and I'm very sad about, that it seems like this feature request is stuck as a thing that we will "do later" aka never or treated like "we got more important stuff to do", with ChatGPT robot like answers from support (sorry for that).
Even pam-auth is working on Ubuntu out of the box. It isn't nothing unresolvable, just better stuff to do...
Would hoping you might can open up some documentation and ways to give at least the community a chance to resolve that issue.

Edited by sabralod
Link to comment
Share on other sites

Hi @sabralod

Welcome to the Enpass Forums.

I can certainly understand your disappointment in this matter. We forwarded this request to our developers and would like to inform you that they have investigated its feasibility. This feature request may be included in future Enpass releases even though we have not yet received any specific version updates. Your support and patience are greatly appreciated.

Link to comment
Share on other sites

  • 3 months later...
  • 5 months later...
  • 1 month later...
  • 1 month later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

×
×
  • Create New...