Mobile Biometric Authentication: The Future of Secure Access

1. DATA SHEET Mobile Biometric Authentication Convenient and secure biometric authentication options (Face ID and Touch ID) for mobile apps No matter what your application is about- ease of use, frictionless authentication, ensured security (protection against frauds and password-related attacks) are a must. These factors let you create both a stunning first impression and long-lasting trust. When using Mobile Apps, consumers tend to open the app and quickly start using it. Asking for the account password whenever consumers visit the app can be a painful experience for them. But at the same time, this step can be a business requirement for ensuring secure access to the app. Now the question is what one should do to ensure both a great user experience and security during authentication in mobile apps? To which the answer is Mobile Biometric Authentication. Let’s dive into it in the section below.

2. What is Mobile Biometric Authentication As the name suggests, biometric authentication uses the biometric data of a person for authentication. This feature by LoginRadius is dedicated to mobile apps and allows consumers to use their mobile devices FaceID and TouchID for authentication. This way, consumers get to use their existing FaceID or TouchID for authentication without having to put in additional effort. Also, consumers’ biometric data remains stored on their phone rather than the server, making it even more secure. Let’s see how it works: • During the first login on a mobile app, it asks consumers to authenticate themself using passwords and choose the biometric authentication option, i.e., Touch ID (fingerprint) or Face ID (face). Consumers don't even need to invest time in setting a fingerprint or face for your mobile app; what they have set for their mobile device works perfectly on your app too. • Keep the password login sessions maintained for a long run, let’s say up to 60 days or whatever suits your business requirements. • On every next visit to the app (when the password login session is still valid), ask the consumer to locally authenticate itself using the biometric authentication (Touch ID or Face ID) of their choice. It is a quick and painless way for them and still ensures that the right person accesses the app. © LoginRadius Inc. | Confidential Information 2

3. There are multiple use cases of this feature, for example: • Secondary Authentication: You can utilize these mobile biometric authentication features for multi-factor or two-factor authentication. • Authorize High-Risk Actions: You can utilize these mobile biometric authentication features for event-based authentication. For example, while performing a financial transaction or changing credentials. • Continuous Authentication: You can request consumers to authenticate using biometric options upon suspecting a risk behavior or as a random security check. Let’s get into further details about the Mobile Biometric Authentication features and benefits that LoginRadius offers. © LoginRadius Inc. | Confidential Information 3

4. Features LoginRadius Offers LoginRadius offers local authentication with Touch ID and Face ID for Android and iOS devices, given that consumers’ mobile devices also support these features. • Touch ID: This feature lets you authenticate consumers using their Fingerprint. Also, consumers use fingerprints that are the same as already set for the Android or iOS mobile device. Thus, they don’t even need to go through the entire fingerprint setup process on your app. • Face ID: This feature lets you authenticate consumers using their Face. The face id remains the same as already set for consumer’s the Android or iOS mobile device. Thus, consumers need not go through the Face ID setup process on your app. You can configure both authentication options for your app and let the consumer choose their preferred way or the available option with their device while setting up the app. For example, iOS 11 supports Face ID, while the older versions only supported Touch ID. The above features are local authentication concepts, and consumers’ biometric data don’t even leave their mobile devices. Hence, as a business, you don’t need to worry about storing, processing, and securing the consumer’s biometric data. LoginRadius provides Android and iOS SDKs to utilize Face ID and Touch ID authentication on your mobile apps for consumers. © LoginRadius Inc. | Confidential Information 4

5. Benefits The following are the various benefits offered by Biometric Authentication for Mobile Apps: • Biometric data cannot be hacked or duplicated. Thus, it protects consumers’ accounts against account takeover attacks. • Easy to use as consumers don’t need to remember or enter one more password or PIN. Also, consumers don’t need to worry about resetting their credentials since there is no use case of forgetting one’s biometric credentials like fingerprint or face. • Consumers are well aware of authenticating using Face ID and Touch ID as Android and iOS devices use this feature extensively. • Fraudsters don’t tend to use their fingerprint or face for an application they are planning to defraud. Since biometric information is unique, and can disclose their identity when analyzed in legal circumstances. Thus, it naturally protects against possible frauds. • Physical proximity is required if hackers want to collect the required information and bypass the login process that requires biometric authentication. Hacking by coming into the physical proximity of the actual consumer is rare. © LoginRadius Inc. | Confidential Information 5

6. Conclusion LoginRadius makes it extremely easy for you to add biometric authentication on your mobile apps with minimal development efforts and maintenance. Utilize this feature to ensure the security and optimal user experience for your consumers. Contact Us: sales@loginradius.com LoginRadius is a leading provider of cloud-based Customer Identity and Access Management solutions for mid-to-large sized companies. The LoginRadius solution serves over 3,000 businesses with a monthly reach of over 1 billion users worldwide. ©Copyright, LoginRadius Inc. All Rights Reserved.