Biometrics + PIN in a mobile app: we made sign-in painless and properly secured
In PDP Mobile, we tightened up layered authentication: sign-in with Face ID, fingerprint, and PIN. Secrets are stored in Secure Keychain and Keystore, and on-device data is kept in encrypted MMKV.
In PDP Mobile, we tightened up layered authentication: sign-in with Face ID, fingerprint, and a PIN. It’s a familiar scenario: in the morning you grab your phone, coffee in one hand, and with the other you try not to miss the screen 😅 In this case, biometrics really save the UX.
Under the hood, there’s no magic, just solid engineering: secrets are stored in Secure Keychain on iOS and Keystore on Android. To protect against bots during registration, we integrated Yandex reCAPTCHA — in an era when automation is creeping into everything, that’s basically a must-have. And on-device data is stored in encrypted MMKV.
The result: sign-in is fast for the user, but inconvenient for an attacker. A security vs convenience balance that we’re not embarrassed to ship to production.