DEV Community

Cover image for Google Play Biometrics Verification Method: Should You Turn It On?
Luxand.cloud
Luxand.cloud

Posted on

1

Google Play Biometrics Verification Method: Should You Turn It On?

An update for the Google Play Store is coming soon! Google is notifying Android users about a change related to how you verify purchases. This change aims to promote the use of fingerprint or facial recognition (biometric authentication) instead of passwords.

Now users have several questions: How does it work? Is it safe? But the biggest question is: should you turn it on or not?

Is Google Play’s Biometrics Verification Method Safe?

Google Play biometrics verification is designed to be secure against theft of your biometrics itself:

  • Device-based storage. Your biometric data (fingerprint, face scan) is stored securely on your device's hardware, not on Google's servers. This makes it much harder for hackers to steal it remotely even if they breach Google's systems.
  • Encryption. The biometric data is typically encrypted on your device using strong keys. Even if someone manages to access the raw data, it would be useless without the decryption key. In other words, imagine your fingerprint or face scan as a secret code used for Google Play purchases. Encryption scrambles this code on your device like a super-complex lock. Even if someone peeked at the scrambled code, they wouldn't be able to crack it without a special key. This key is also stored securely on your device, making it very difficult to steal your biometric information.

What are the risks of turning on Google Play biometric verification? Learn more here: Google Play Biometrics Verification Method: Should You Turn It On?

Heroku

Simplify your DevOps and maximize your time.

Since 2007, Heroku has been the go-to platform for developers as it monitors uptime, performance, and infrastructure concerns, allowing you to focus on writing code.

Learn More

Top comments (0)

Image of Timescale

Timescale – the developer's data platform for modern apps, built on PostgreSQL

Timescale Cloud is PostgreSQL optimized for speed, scale, and performance. Over 3 million IoT, AI, crypto, and dev tool apps are powered by Timescale. Try it free today! No credit card required.

Try free

👋 Kindness is contagious

Please leave a ❤️ or a friendly comment on this post if you found it helpful!

Okay