Touch ID for STRIP on iOS (open thread)

I’m excited to announce that Touch ID is now available in STRIP on iOS devices as of version 2.5.0! Please let us know what you think.

Just curious, does this store your (encrypted) password on your device?
If so, how hard might it be to obtain the password from iOS?
Compared to plain old passcode, how secure is a touchid lock?

Just curious, does this store your (encrypted) password on your device?

Yes. When you enable Touch ID your password is stored in a keychain item. Because the device has Touch ID, the actual storage of the password is encrypted in the device’s Secure Enclave. For details on this you might have a look at this article:

If so, how hard might it be to obtain the password from iOS?

Pretty hard. At least that seems to be the case right now, we have heard of no successful attacks against this technology yet. But “Some People” prefer to avoid all biometrics :wink:

Compared to plain old passcode, how secure is a touchid lock?

It’s not really an alternative, so I’m not sure how to make the comparison. Touch ID is a convenience feature doesn’t to allow you to use your fingerprint to unlock your actual password—that goes for iOS locking as much as it does for the feature in STRIP. If you trust the technology to keep your password securely stored, it’s incredibly convenient.

One of the reasons you might opt to use Touch ID is because you have a really long master password for STRIP that’s easy to type on your desktop but a nuisance to tap out in iOS. So, in that sense, for some people and scenarios, using Touch ID makes them more safe (again assuming the technology is secure).

There’s a bug in the new Touch ID feature affecting some customers. An update is on the way that fixes it handily, we’re beta testing that now. If anybody wants to get the update early and help us test it we’d sure appreciate it, just drop us a line.

The update was submitted to the App Store on Thursday evening, we’re waiting for release approval—hopefully soon!

Update 2.5.1 for iPhone and iPad is now available addressing a few bugs in the initial release of the Touch ID login feature.