Skip to content

How to unlock your database using Face ID/Touch ID

This article explains how to require Face ID (Touch ID) to access your database. That is, when you launch KeePassium it would run a face or fingerprint scan and open your data only to you.

KeePassium has two-layer security:

  • The app can be unlocked with a passcode or biometric scan
  • The database can be decrypted only with its master key

The biometric check and database encryption are in different layers. To access your database after a biometric scan, you need to configure the app to automatically unlock database after you unlock the app.

  • Open KeePassium settings
  • Tap App Protection
    • Turn on Enable AppLock and enter a passcode. You will need this code to unlock the app if Face ID (Touch ID) fails for some reason.
    • Turn on Use Face ID (Touch ID)
  • Return to main settings screen and tap Data Protection
    • Turn on Remember Master Keys
    • Set a long Database Timeout (e.g. "Never") — after this time KeePassium will require the full database master key, no matter what.

If Face ID (Touch ID) switch is disabled (greyed out)

First of all, make sure that Enable AppLock is active. Then, open device settings → KeePassium and allow the app to use Face ID/Touch ID sensor.