Insufficient security features available on this device error

[xmxanuel]

Hey,

After upgrading to the most recent parity signer app. I am getting the following error

Insufficient security features available on this device

Did the hardware requirements changed with the new version?

I looked into your code and found it here:

BiometricManager.BIOMETRIC_ERROR_NO_HARDWARE -> {
        Toast.makeText(
          context,
          "Insufficient security features available on this device.",
          Toast.LENGTH_LONG
        ).show()
        return
      }

Is a bio metric protection on the phone, now a requirement?

Thanks for your help.

[Slesarew]

Either biometric protection or hardware strongbox is required on Android devices. This is deliberate design decision, due to poor usability of strong passwords required for protection of the seed when no hardware security is available.

An alternative is allowing paper seed storage (#871) or allowing credentials protection (which goes against current security policy, @kirushik please have a look). I understand there are people who have easier time physically isolating device than handling this biometry issue (I'm one of those myself really), but it's probably too hazardous and attractive shortcut for everyone else.

[xmxanuel]

Thanks for the quick reply. :+1:

I think the error message could be definitely improved. It would be also nice to show that in the Play Store as a hardware requirement?

Would a on your own-risk release without the biometry requirement be possible instead of forcing every user to buy a new android device?

[leonardoalt]

This /\ please

Honestly, it's pretty insane that now tons of people will have to buy a new device and make the previous one obsolete because of that.

[carltraveler]

I have buy a newphone with fingerprint due to that error ^_^

[denniswell]

Seconding the comments from above. This is pretty insane tbh. This is also not mentioned in the documentation e.g. here: https://support.polkadot.network/support/solutions/articles/65000180512. A search for "biometric" in the docs also reveals nada...

[Tbaut]

This will make you happy https://github.com/paritytech/parity-signer/pull/1250