Biometric Authentication API

Prompt fingerprint or face authentication with the native Android BiometricPrompt directly from your web app.

The Biometric Authentication API prompts the user for fingerprint or face authentication using the device's native BiometricPrompt. If the OS is configured that way, it falls back to the device PIN or pattern.

How to Use:

Trigger the system dialog from an HTML link or from JavaScript:

<a href="bioauth://">Unlock</a>

window.location.href = "bioauth://";

Typical Use Cases:

• Gate access to a "wallet", "settings", or "orders" page inside your web app.
• Require re-authentication before a sensitive checkout step.

Behavior:

• The system dialog is drawn by the app — your web app does not need to render any UI.
• After a successful authentication the app resumes normally so your web app can react (e.g. by navigating to the protected page).
• On some devices without biometrics, the OS may show a PIN prompt instead.

Related Config:

enableBioMetricAuth in Config.java turns on the built-in App Lock flow that requires biometric auth on every app launch. bioauth:// is independent of this flag and can be triggered at any time from JavaScript.