commit 6e838978e3e08be9e6b45c2f6f89755d22db6b52
author Torsten Grote <t@grobox.de> Wed Aug 11 11:54:28 2021 +0200
committer Chirayu Desai <952062+chirayudesai@users.noreply.github.com> Fri Sep 24 02:55:56 2021 +0530
tree c755ac25f2e8fae7507f86785b34aad835bbbebd
parent e0f728205d59ab54e283be55e6a1346cf75a4d99

Ask for system authentication before storing a new recovery code

This will help to prevent data extraction via seedvault when somebody gets hold of an unlocked phone. However, it will not help against someone able to force you to provide fingerprints or other device secrets.

app/src/main/AndroidManifest.xml

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index c8a8da5..d3fa718 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -47,6 +47,9 @@
         android:name="android.permission.QUERY_ALL_PACKAGES"
         tools:ignore="QueryAllPackagesPermission" />
 
+    <!-- Used to authenticate saving a new recovery code -->
+    <uses-permission android:name="android.permission.USE_BIOMETRIC" />
+
     <application
         android:name=".App"
         android:allowBackup="false"