Skip to content
docs

Protection

Protection = "biometricsOrPasscode" | "biometricsOnly"

Defined in: types.ts:11

Who may open a secret.

  • biometricsOrPasscode (default) — Face ID / Touch ID / fingerprint, or the device passcode as the fallback. Survives re-enrolling biometrics.
  • biometricsOnly — the biometrics enrolled now, no passcode fallback. A thief who watched the passcode cannot open it; adding or removing a face / finger makes it unreadable for good (biometry-changed). Opt-in, and only sensible once the user has a backup.