Nostr Web Client

PSA: Don’t exclusively use biometrics for access control. Face unlock, fingerprint, etc. Physical access to your body by your attacker is all that’s required.

Makes sure your access controls also require information. Something only you know (password, PIN etc.)

Moid 10mo ago

I've never used face or fingerprint for access.

I know it is futile, as I have pushed those same buttons many times with my fingers, and have multiple photos with me in them, but something about voluntarily using my face or fingerprint when other options exist feels wrong.

Reply to this note

Discussion