Understand about your Android fingerprint security & using feature's

Understand fingerprint security

Your fingerprint data is stored securely and never leaves your Pixel or Nexus phone. Your fingerprint data isn't shared with Google or any apps on your device. Apps are notified only whether your fingerprint was verified.

If you're ready to get started using your fingerprint to unlock your phone, learn how to set up your fingerprints.

Cautions about fingerprints

Fingerprints are an easy way to unlock your phone. But a fingerprint may be less secure than a strong PIN, pattern, or password.

A copy of your fingerprint could be used to unlock your phone. You leave fingerprints on many things you touch, including your phone.

Fingerprint data is stored securely

Google has strict guidelines for device makers about how fingerprint data can be stored on a Pixel or Nexus device.

Fingerprint hardware security requirements

Secure location

• Capturing and recognizing your fingerprint must happen in a secure part of the hardware known as a Trusted Execution Environment (TEE).
• Hardware access must be limited to the TEE and protected by an SELinux policy.
• Fingerprint data must be secured within sensor hardware or trusted memory so that images of your fingerprint aren't accessible.

Secure storage & removal

• Only the encrypted form of the fingerprint data can be stored on the file system, even if the file system itself is encrypted.
• Fingerprint data must be removed from the device when a user is removed.
• Rooting of a device must not compromise fingerprint data.

Fingerprint template authentication requirements

Google's guidelines require fingerprint templates — that is, the processed versions of raw fingerprint images — to be cryptographically authenticated.

Fingerprint templates must be signed with a private, device-specific key — like keyed-hash message authentication code (HMAC) — with at least the absolute file-system path, group, and finger ID, such that template files won't work on another device, or for anyone besides the person who set them up on the same device. For example, copying the fingerprint data from a different user on the same device, or from another device, must not work.

A device-specific encryption key — like Advanced Encryption Standard (AES) — must be used for fingerprint data so that a raw image or fingerprint template isn't readable by a separate device.

Unlock with your fingerprint

If your Pixel or Nexus phone has a fingerprint sensor, you can use your fingerprint to unlock your phone, authorize purchases, and unlock specific apps.

Note: Android isn't the same on all devices. These instructions are for devices running Android 7.1 and up. Learn how to check your Android version.

Get started with fingerprints

About fingerprint security

We strongly recommend locking your screen to help protect your device. Your device's fingerprint sensor gives you a convenient unlocking option.

But there are a few things to keep in mind:

• A fingerprint may be less secure than a strong PIN, pattern, or password.
• A copy of your fingerprint could be used to unlock your phone. You leave fingerprints on many things you touch, including your phone.
• You'll be asked to add a backup PIN, pattern, or password. Remember your backup, because you'll need to use it sometimes, like after restarting your device, or if your fingerprint isn't recognized.

Where your fingerprint data is stored

Your fingerprint data is stored securely and never leaves your device. Your data is not shared with Google or apps on your device. Learn more about how fingerprint data is secured.

Set up your first fingerprint

1. Open your device's Settings app .
2. Under "Personal," tap Security  Pixel Imprint or Nexus Imprint.
3. Follow the on-screen directions.
4. If you don't already have a screen lock, you'll be asked to add a backup PIN, pattern, or password to unlock your device.
5. Scan your first fingerprint. Tips:
   • Place your finger on your device's sensor (not its screen).
   • Hold your phone in the same way that you'd normally hold it when unlocking. For example, hold your phone with its screen facing you.

Add more fingerprints

You can add up to 5 fingerprints. You may want to add other fingers that you might use to unlock your device.

Keep in mind that anyone whose fingerprints you add will be able to unlock your device and authorize purchases with your account.

1. Open your device's Settings app .
2. Under "Personal," tap Security  Pixel Imprint or Nexus Imprint.
3. Scan your current fingerprint or use your backup screen lock method.
4. Tap Add fingerprint.
5. Scan another fingerprint.
6. You can rename each fingerprint so that you can tell them apart. Tap the current name, type a new name, and tap OK.

Note: If multiple people share your device, they should add their fingerprints from within their own profiles.

Use your fingerprint

Unlock your device

Unlock with your fingerprint

After you've set up your fingerprint, place your finger on your device's fingerprint sensor until your device unlocks.

Tip: On some devices, you'll need to press the Power button to wake your screen first.

Unlock with your backup method

For security, you'll need to use your backup PIN, pattern, or password:

• When your fingerprint isn't recognized after a few tries
• After restarting (rebooting) your device
• After switching to a different user on the device
• After more than 48 hours have passed since you last unlocked using your backup method

Authorize payments or unlock apps

You can use your fingerprint to authorize payments or unlock certain apps.

If available, you'll see a message asking you to scan your fingerprint.

Note: Your fingerprint information isn't shared with the app.

Manage fingerprint settings

Edit your fingerprints

You can remove, rename, and replace fingerprints:

1. Open your device's Settings app .
2. Under "Personal," tap Security  Pixel Imprint or Nexus Imprint.
3. Scan your current fingerprint or use your backup screen lock method.
4. Make the change you want.
   • To add a new fingerprint, tap Add fingerprint.
   • To delete a fingerprint, tap an existing fingerprint and then Delete.
   • To rename a fingerprint, tap an existing fingerprint, type a new name, and tap OK.

Stop using fingerprints

If you don't want to use your fingerprint to unlock your device, authorize payments, or unlock apps, you can delete your fingerprints. You can always set them up again if you change your mind.

Option 1: Use only PIN, pattern, or password to unlock

If you'd like to use only your backup screen lock method, instead of your fingerprint:

1. Open your device's Settings app .
2. Under "Personal," tap Security  Pixel Imprint or Nexus Imprint.
3. Scan your fingerprint or use your backup screen lock method.
4. Tap the name of a fingerprint and then Delete. Repeat for all listed fingerprints.

Option 2: Remove screen lock device protection

We strongly recommend continuing to lock your screen for security. But if you'd rather not use a fingerprint, PIN, pattern, password, or automatic unlock:

1. Open your device's Settings app .
2. Under "Personal," tap Security  Screen lock.
3. Choose None or Swipe.

Important: Choosing "None" or "Swipe" for your screen lock will delete your fingerprints.

Troubleshoot fingerprint use

Fingerprint not accepted

If your fingerprint wasn't accepted:

• Use your backup PIN, pattern, or password.
• If you can't remember your backup, follow these steps to get back into your device.

After you get back into your device, you may want to adjust your settings so that your fingerprint is more likely to be accepted:

1. Edit your fingerprints.
2. Be careful to hold your phone in the same way that you'd normally hold it when unlocking. For example, hold your phone with its screen facing you.
3. Add up to 5 fingerprints, in case a finger gets injured.

Screen lock option disabled

You may see a "Screen lock option disabled" message on the fingerprint settings page.

This message means that your device administrator requires you to use a different screen lock method. For example, if you have a work account on your phone, your work account may require you to secure your device using a PIN, pattern, or password.

You can still use your fingerprint to authorize payments and unlock specific apps.