Use biometrics confirm device owner presence or authenticate users. A couple of methods are provided to handle user credentials. These are securely stored using Keychain (iOS) and Keystore (Android).
A free, comprehensive biometric authentication plugin with secure credential storage:
- All biometric types - Face ID, Touch ID, Fingerprint, Face Authentication, Iris
- Secure credential storage - Keychain (iOS) and Keystore (Android) integration
- Flexible fallback - Optional passcode fallback when biometrics unavailable
- Customizable UI - Full control over prompts, titles, descriptions, button text
- Detailed error codes - Unified error handling across iOS and Android
- Modern package management - Supports both Swift Package Manager (SPM) and CocoaPods (SPM-ready for Capacitor 8)
Perfect for banking apps, password managers, authentication flows, and any app requiring secure user verification.
The most complete doc is available here: https://capgo.app/docs/plugins/native-biometric/
npm i @capgo/capacitor-native-biometric
import { NativeBiometric, BiometryType } from "@capgo/capacitor-native-biometric";
async performBiometricVerification(){
const result = await NativeBiometric.isAvailable();
if(!result.isAvailable) return;
const isFaceID = result.biometryType == BiometryType.FACE_ID;
const verified = await NativeBiometric.verifyIdentity({
reason: "For easy log in",
title: "Log in",
subtitle: "Maybe add subtitle here?",
description: "Maybe a description too?",
})
.then(() => true)
.catch(() => false);
if(!verified) return;
const credentials = await NativeBiometric.getCredentials({
server: "www.example.com",
});
}
// Save user's credentials
NativeBiometric.setCredentials({
username: "username",
password: "password",
server: "www.example.com",
}).then();
// Delete user's credentials
NativeBiometric.deleteCredentials({
server: "www.example.com",
}).then();This is a plugin specific list of error codes that can be thrown on verifyIdentity failure, or set as a part of isAvailable. It consolidates Android and iOS specific Authentication Error codes into one combined error list.
| Code | Description | Platform |
|---|---|---|
| 0 | Unknown Error | Android, iOS |
| 1 | Biometrics Unavailable | Android, iOS |
| 2 | User Lockout | Android, iOS |
| 3 | Biometrics Not Enrolled | Android, iOS |
| 4 | User Temporary Lockout | Android (Lockout for 30sec) |
| 10 | Authentication Failed | Android, iOS |
| 11 | App Cancel | iOS |
| 12 | Invalid Context | iOS |
| 13 | Not Interactive | iOS |
| 14 | Passcode Not Set | Android, iOS |
| 15 | System Cancel | Android, iOS |
| 16 | User Cancel | Android, iOS |
| 17 | User Fallback | Android, iOS |
isAvailable(...)verifyIdentity(...)getCredentials(...)setCredentials(...)deleteCredentials(...)isCredentialsSaved(...)getPluginVersion()- Interfaces
- Enums
isAvailable(options?: IsAvailableOptions | undefined) => Promise<AvailableResult>Checks if biometric authentication hardware is available.
| Param | Type |
|---|---|
options |
IsAvailableOptions |
Returns: Promise<AvailableResult>
Since: 1.0.0
verifyIdentity(options?: BiometricOptions | undefined) => Promise<void>Prompts the user to authenticate with biometrics.
| Param | Type |
|---|---|
options |
BiometricOptions |
Since: 1.0.0
getCredentials(options: GetCredentialOptions) => Promise<Credentials>Gets the stored credentials for a given server.
| Param | Type |
|---|---|
options |
GetCredentialOptions |
Returns: Promise<Credentials>
Since: 1.0.0
setCredentials(options: SetCredentialOptions) => Promise<void>Stores the given credentials for a given server.
| Param | Type |
|---|---|
options |
SetCredentialOptions |
Since: 1.0.0
deleteCredentials(options: DeleteCredentialOptions) => Promise<void>Deletes the stored credentials for a given server.
| Param | Type |
|---|---|
options |
DeleteCredentialOptions |
Since: 1.0.0
isCredentialsSaved(options: IsCredentialsSavedOptions) => Promise<IsCredentialsSavedResult>Checks if credentials are already saved for a given server.
| Param | Type |
|---|---|
options |
IsCredentialsSavedOptions |
Returns: Promise<IsCredentialsSavedResult>
Since: 7.3.0
getPluginVersion() => Promise<{ version: string; }>Get the native Capacitor plugin version.
Returns: Promise<{ version: string; }>
Since: 1.0.0
Result from isAvailable() method indicating biometric authentication availability.
| Prop | Type | Description |
|---|---|---|
isAvailable |
boolean |
Whether authentication is available (biometric or fallback if useFallback is true) |
authenticationStrength |
AuthenticationStrength |
The strength of available authentication method (STRONG, WEAK, or NONE) |
errorCode |
BiometricAuthError |
Error code from BiometricAuthError enum. Only present when isAvailable is false. Indicates why biometric authentication is not available. |
| Prop | Type | Description |
|---|---|---|
useFallback |
boolean |
Specifies if should fallback to passcode authentication if biometric authentication is not available. |
| Prop | Type | Description | Default |
|---|---|---|---|
reason |
string |
||
title |
string |
||
subtitle |
string |
||
description |
string |
||
negativeButtonText |
string |
||
useFallback |
boolean |
Specifies if should fallback to passcode authentication if biometric authentication fails. | |
fallbackTitle |
string |
Only for iOS. Set the text for the fallback button in the authentication dialog. If this property is not specified, the default text is set by the system. | |
maxAttempts |
number |
Only for Android. Set a maximum number of attempts for biometric authentication. The maximum allowed by android is 5. | 1 |
allowedBiometryTypes |
BiometryType[] |
Only for Android. Specify which biometry types are allowed for authentication. If not specified, all available types will be allowed. |
| Prop | Type |
|---|---|
username |
string |
password |
string |
| Prop | Type |
|---|---|
server |
string |
| Prop | Type |
|---|---|
username |
string |
password |
string |
server |
string |
| Prop | Type |
|---|---|
server |
string |
| Prop | Type |
|---|---|
isSaved |
boolean |
| Prop | Type |
|---|---|
server |
string |
| Members | Value | Description |
|---|---|---|
NONE |
0 |
No authentication available, even if PIN is available but useFallback = false |
STRONG |
1 |
Strong authentication: Face ID on iOS, fingerprints on devices that consider fingerprints strong (Android). Note: PIN/pattern/password is NEVER considered STRONG, even when useFallback = true. |
WEAK |
2 |
Weak authentication: Face authentication on Android devices that consider face weak, or PIN/pattern/password if useFallback = true (PIN is always WEAK, never STRONG). |
| Members | Value | Description |
|---|---|---|
UNKNOWN_ERROR |
0 |
Unknown error occurred |
BIOMETRICS_UNAVAILABLE |
1 |
Biometrics are unavailable (no hardware or hardware error) Platform: Android, iOS |
USER_LOCKOUT |
2 |
User has been locked out due to too many failed attempts Platform: Android, iOS |
BIOMETRICS_NOT_ENROLLED |
3 |
No biometrics are enrolled on the device Platform: Android, iOS |
USER_TEMPORARY_LOCKOUT |
4 |
User is temporarily locked out (Android: 30 second lockout) Platform: Android |
AUTHENTICATION_FAILED |
10 |
Authentication failed (user did not authenticate successfully) Platform: Android, iOS |
APP_CANCEL |
11 |
App canceled the authentication (iOS only) Platform: iOS |
INVALID_CONTEXT |
12 |
Invalid context (iOS only) Platform: iOS |
NOT_INTERACTIVE |
13 |
Authentication was not interactive (iOS only) Platform: iOS |
PASSCODE_NOT_SET |
14 |
Passcode/PIN is not set on the device Platform: Android, iOS |
SYSTEM_CANCEL |
15 |
System canceled the authentication (e.g., due to screen lock) Platform: Android, iOS |
USER_CANCEL |
16 |
User canceled the authentication Platform: Android, iOS |
USER_FALLBACK |
17 |
User chose to use fallback authentication method Platform: Android, iOS |
| Members | Value |
|---|---|
NONE |
0 |
TOUCH_ID |
1 |
FACE_ID |
2 |
FINGERPRINT |
3 |
FACE_AUTHENTICATION |
4 |
IRIS_AUTHENTICATION |
5 |
MULTIPLE |
6 |
To use FaceID Make sure to provide a value for NSFaceIDUsageDescription, otherwise your app may crash on iOS devices with FaceID.
This value is just the reason for using FaceID. You can add something like the following example to App/info.plist:
<key>NSFaceIDUsageDescription</key>
<string>For an easier and faster log in.</string>To use android's BiometricPrompt api you must add the following permission to your AndroidManifest.xml:
<uses-permission android:name="android.permission.USE_BIOMETRIC">Jonthia QliQ.dev Brian Weasner Mohamed Diarra
Learn about contributing HERE
Hasn't been tested on Android API level 22 or lower.
