Wallets that exchange passwords with biometrics are buying and selling one type of safety for a quicker one. Thanos Pockets treats biometric unlock as a comfort layer on high of actual encryption — not an alternative choice to it.
Biometric authentication feels safe. It’s quick, it’s frictionless, and it includes one thing bodily distinctive to the consumer. For these causes, quite a lot of wallets have began positioning Face ID or fingerprint unlock as the first safety mechanism — the factor standing between an attacker and the consumer’s funds. That framing has an issue: biometrics are an authentication methodology, not an encryption methodology. They confirm that the fitting individual is current. They don’t shield the underlying knowledge when that individual will not be.
A pockets secured solely by biometric unlock shops its key materials in a means that’s accessible as soon as the biometric test passes. On a tool that’s unlocked, or in an surroundings the place the biometric sensor could be bypassed or spoofed, the keys are reachable with out the consumer being meaningfully concerned within the safety choice. It is a recognized limitation of biometric-only safety fashions, and it turns into extra consequential the extra beneficial the property behind the biometric test are.
Thanos Pockets handles this by separating the safety layers and assigning every one the fitting job. The pockets’s key materials is protected by AES encryption at relaxation — a cryptographic safety that applies to the saved knowledge itself, no matter what state the gadget is in or whether or not any authentication test has been handed. On high of that sits password-gated entry: a credential the consumer is aware of, which gates entry into the pockets independently of the gadget’s personal authentication state. Biometric unlock is then an elective layer on high of that — a method to entry the password-protected pockets quicker, with out typing the password every time, quite than a alternative for the password-protected layer beneath it.
The sensible distinction is critical. In a biometric-only mannequin, the safety chain is: biometric passes, pockets opens. In Thanos Pockets’s mannequin, the safety chain is: AES-encrypted vault, unlocked by a password, optionally accessed quicker through biometric. Bypassing or spoofing the biometric test within the second mannequin doesn’t open the pockets — it nonetheless requires the password. The biometric provides velocity; it doesn’t exchange the safety that was already there.
This distinction additionally issues for the state of affairs most pockets customers are enthusiastic about after they fear about safety: a misplaced or stolen gadget. A stolen cellphone with biometric-only pockets safety is a significant threat if the attacker can bypass the gadget lock or has entry to the consumer’s biometric knowledge. A stolen cellphone with Thanos Pockets requires the attacker to moreover know the pockets password — a separate credential that doesn’t stay on the gadget and can’t be extracted from it the best way biometric templates probably can.
The reset perform completes the image. When a consumer wipes the Thanos Pockets vault, the native encrypted knowledge is eliminated quite than archived. Because of this a misplaced gadget, as soon as the pockets is wiped, doesn’t retain a recoverable copy of the vault {that a} sufficiently motivated attacker may work in opposition to. The property stay accessible by means of the 12-word restoration phrase on any BIP-compatible pockets. The encrypted knowledge on the misplaced gadget turns into a lifeless finish.
Safety and comfort do not need to be traded in opposition to one another — they should be layered appropriately. Biometrics belong within the comfort layer. Encryption and passwords belong within the safety layer. Thanos Pockets retains these two issues of their proper locations, quite than collapsing them into one mechanism that does neither job in addition to it ought to.
