How to unlock your database using Face ID/Touch ID
This article explains how to require Face ID (Touch ID) to access your database. That is, when you launch KeePassium it would run a face or fingerprint scan and open your data only to you.
KeePassium has two-layer security:
- The app can be unlocked with a passcode or biometric scan
- The database can be decrypted only with its master key
The biometric check and database encryption are in different layers. To access your database after a biometric scan, you need to configure the app to automatically unlock database after you unlock the app.
- Open KeePassium settings and select App Protection
- Turn on the App Protection switch and enter a passcode. You will need this code to unlock the app if Face ID (Touch ID) fails for some reason.
- Turn on Use Face ID (Touch ID)
- Return to main settings screen and select Data Protection
- Turn on Remember Master Keys
- In Database Timeout, select a long timeout (such as "Never") — after this time KeePassium will require the full database master key, no matter what.
If Face ID (Touch ID) switch is disabled (greyed out)
First of all, make sure that App Protection switch is active. Then, open device settings → Apps → KeePassium, and allow the app to use Face ID/Touch ID sensor.