![\"touch-id-icon\"](\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/44\/2019\/03\/touch-id-icon.png\"){kind=icon}
Touch ID adds biometric authentication to your device so users can touch the home button to unlock their device instead of using a pin code.<\/p>\n\t\t\t\tOne of my favorite features of the iPhone is Touch ID, introduced by Apple with the release of the iPhone 5s a couple of years ago. Touch ID adds biometric authentication to your device so users can touch the home button to unlock their device instead of using a pin code.<\/p>\n
Since its initial release, Apple has added a few new ways to use Touch ID, including integrating it as an essential part of Apple Pay and adding an API for developers to use Touch ID in their apps. In this blog post we’re going to discuss how you can leverage Touch ID to create secure user authentication. We’ll include a fallback to store the password in Keychain and authenticate our users against that in cases where the device doesn\u2019t support Touch ID.<\/p>\n
If the device has Touch ID, we won’t need to sign the user up since the device can authenticate them for us. But to ensure we support devices such as iPhone 4, 4S, and the iPhone 5, we’ll want to ensure we’ve got a fallback in place. To do this, we’ll use Keychain to store and validate the user credentials.<\/p>\n I like to use UserDefaults for storing usernames to read back information when the app launches and populate the username UITextField for the user. It’s small touches like this that make an app feel more polished and help achieve higher ratings on the app store.<\/p>\n It’s important to note that we don’t want to use UserDefaults here since it’s not a secure approach to saving your data. Instead, we’ll use Keychain, which is iOS’s built-in secure storage service that allows us to store passwords, keys, certificates, and more. My colleague Ren\u00e9 Ruppert<\/a> has developed a helpful wrapper for storing passwords on iOS with Keychain that you can grab here<\/a> and is what I’ll be using.<\/p>\n To save the password, we simply call \u2018SetPasswordForUsername\u2019. In this case, I have my serviceId set to \u2018MySecureApp\u2019.<\/p>\n Once we’ve done that, it’s time to set \u2018hasLogin\u2019 to true and synchronize the UserDefaults.<\/p>\n We’re now ready to validate the credentials provided by the user. To do this, we get the password from the Keychain and check that it matches the password provided. We then repeat the process with the username. If CheckLogin returns true, then we can continue loading new views.<\/p>\n Implementing user authentication with Touch ID is painless and only involves a tiny amount of code since iOS does most of the heavy lifting for us. Below is all the code required to get started.<\/p>\n Not all apps require a backend service for user authentication, and iOS provides lots of options for authenticating locally. If you wanted to take this one step further you could look at integrating 1Password<\/a> authentication into your app. I’ve created a completed version of the demo project on GitHub<\/a>, to which I’ll be adding 1Password support to in a separate branch that you can find here<\/a>. Additionally, be sure to read through our full documentation<\/a> on integrating Touch ID.\t\t<\/p>\n","protected":false},"excerpt":{"rendered":" One of my favorite features of the iPhone is Touch ID, introduced by Apple with the release of the iPhone 5s a couple of years ago. Touch ID adds biometric authentication to your device so users can touch the home button to unlock their device instead of using a pin code. Since its initial release, […]<\/p>\n","protected":false},"author":1929,"featured_media":21130,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[2],"tags":[6,4],"class_list":["post-20630","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-developers","tag-ios","tag-xamarin-platform"],"acf":[],"blog_post_summary":" One of my favorite features of the iPhone is Touch ID, introduced by Apple with the release of the iPhone 5s a couple of years ago. Touch ID adds biometric authentication to your device so users can touch the home button to unlock their device instead of using a pin code. Since its initial release, […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/xamarin\/wp-json\/wp\/v2\/posts\/20630","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/xamarin\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/xamarin\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/xamarin\/wp-json\/wp\/v2\/users\/1929"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/xamarin\/wp-json\/wp\/v2\/comments?post=20630"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/xamarin\/wp-json\/wp\/v2\/posts\/20630\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/xamarin\/wp-json\/"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/xamarin\/wp-json\/wp\/v2\/media?parent=20630"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/xamarin\/wp-json\/wp\/v2\/categories?post=20630"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/xamarin\/wp-json\/wp\/v2\/tags?post=20630"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}![\"Xamarin](\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/44\/2019\/03\/Screen-Shot-2015-08-17-at-16.55.22.png\")
<\/a><\/p>\nSupporting Older Devices<\/h2>\n
Sign Up<\/h3>\n
\nvar hasLoginKey = NSUserDefaults.StandardUserDefaults.BoolForKey("hasLogin");\u2028\nif (!hasLoginKey)\u2028\n NSUserDefaults.StandardUserDefaults.SetValueForKey(new NSString(tbxUsername.Text), new NSString("username"));\u2028\n<\/pre>\nSaving the Password<\/h3>\n
\nHelpers.KeychainHelpers.SetPasswordForUsername(tbxUsername.Text, tbxPassword.Text, serviceId, Security.SecAccessible.Always, true);\n<\/pre>\n
\nNSUserDefaults.StandardUserDefaults.SetBool(true, "hasLogin");\u2028\nNSUserDefaults.StandardUserDefaults.Synchronize();\n<\/pre>\n
Validating the User Credentials<\/h3>\n
\nstatic bool CheckLogin(string username, string password)\n{\n if (password == Helpers.KeychainHelpers.GetPasswordForUsername(username, serviceId, true) &&\n username == NSUserDefaults.StandardUserDefaults.ValueForKey(new NSString("username")).ToString())\n {\n return true;\n }\n\n return false;\n}\n<\/pre>\nAdding Touch ID<\/h2>\n
\n\/\/Lets double check the device supports Touch ID\nif (context.CanEvaluatePolicy(LAPolicy.DeviceOwnerAuthenticationWithBiometrics, out error))\n{\n var replyHandler = new LAContextReplyHandler((success, error) =>\n {\n InvokeOnMainThread(() =>\n {\n if (success)\n {\n var newVC = new UIViewController();\n PresentViewController(newVC, true, null);\n }\n else\n {\n var alert = new UIAlertView("OOPS!", "Something went wrong.", null, "Oops", null);\n alert.Show();\n }\n });\n });\n context.EvaluatePolicy(LAPolicy.DeviceOwnerAuthenticationWithBiometrics, "Logging in with Touch ID", replyHandler);\n}\nelse\n{\n var alert = new UIAlertView("Error", "TouchID not available", null, "BOOO!", null);\n alert.Show();\n}\n<\/pre>\nWrapping Up<\/h2>\n