Brain wallet password based on fingerprint?

[tyz]

I just had an idea. What if there is a tool which algorithms create a brain wallet password from the fingerprint (or from multiple fingerprints of the hand)? Every fingerprint is unique. Therefore every password created by the algos will be unique, too.
Thus, one would never run into the risk of losing his or her password anymore. Perhaps there is something already. However, I do not know it.

[unamis76]

I think this has been discussed previously on the forums, or somewhere else, just not sure where... I'll post it if I find it.

This is indeed a great idea, just like there are wallets that allow for fund spending after fingerprint identification, there could possibly be a way to make a "passphrase" of some sorts, composed of fingerprints.

However, at this point in time, it would probably be wiser to bet on retina scanning for this purpose. Or at least retina scanning for spending authorization: we probably don't have camera with enough definition to "take" more random "info" from our retinas than from our fingers.

Interested on opinions regarding retina scanning as an alternative for passphrases vs fingerprints...

[Ayers]

i think fingerprints it's not that secure, it can be repliacated easily, by using the victim fingerprint, on any material that he/she may have touched, it's better to do it in another way like retina yes, or particolare code done with some gestures?

[unamis76]

i think fingerprints it's not that secure, it can be repliacated easily, by using the victim fingerprint, on any material that he/she may have touched, it's better to do it in another way like retina yes, or particolare code done with some gestures?

Good fingerprint replicas aren't easy to make. They take time and that's probably not feasible in most attack vectors.

Not sure I understand what you mean by gestures...

[Lauda]

Interesting concept, but no. You need to think about this more deeply.

This is indeed a great idea

I disagree.

i think fingerprints it's not that secure, it can be repliacated easily, by using the victim fingerprint, on any material that he/she may have touched, it's better to do it in another way like retina yes, or particolare code done with some gestures?

It isn't secure. I generally only use it on phones that don't have any sensitive data nor amount of money on them. People leave their fingerprints pretty much everywhere, one would just need to keep watch of where you're going for a few days and would surely be able to reconstruct your fingerprint from some public place (e.g. transport, coffee shop). Additionally, the law enforcement can unlock your device (or gain access to your money in this case) when we are talking about a fingerprint. When we are talking about passwords, they can't force you to give it to them. Depending on the complexity, they may not be able to do anything about it.

Good fingerprint replicas aren't easy to make. They take time and that's probably not feasible in most attack vectors.

Adequate replicas are easy to make. You should do a bit research regarding the sensors used by smartphones these days. Generally, I think a iris scanner would be a better option.

[Senor.Bla]

i would say this is a bad idea.
fingerprint or retina can be faked . we all have seen it done more than once. and also if there is a way to make this safe i would bet, that i will not be implemented in a safe way, because some company wants to be first and the trad off safety for time.

there is also the problem, that you have to agree how to convert the analog informations to digital ones, so that they will match exactly every single time.   

[talkbitcoin]

there you go (using google)
https://bitcointalk.org/index.php?topic=1016478.0;all
especially this comment number 3 has some good information and some good links that you can follow up for more information on it.

but in conclusion it is indeed a cool idea but it may not be as safe or even easy as you think. but for a random and unique address i think it is good.

[7788bitcoin]

Good idea but difficult to implement. You will definitely need a Digital Image Processor software to identify the finger print and convert it into some kind of "passcode" then the private keys. To me, there are too many potential points of failure which may affect the security and accuracy of the system...

[bostiog1]

I just had an idea. What if there is a tool which algorithms create a brain wallet password from the fingerprint (or from multiple fingerprints of the hand)? Every fingerprint is unique. Therefore every password created by the algos will be unique, too.
Thus, one would never run into the risk of losing his or her password anymore. Perhaps there is something already. However, I do not know it.

it is a great idea but it has to be a very good technology , because someone can make a copy of your fingerprint and use it for login to you account.

[Chris!]

Generally, I think a iris scanner would be a better option.

Great idea Lauda! I'll take 3. Just send me a PM when you're doing the beta testing and I'd be happy to lend an eye hand.


I do think the fingerprint idea would be perfect for spending money but not huge amounts of bitcoin. It would be a great idea if there was 2FA, a password on the local device you're trying to spend from and a fingerprint scan needed. That would take care of most if not all of your 'hacking' issues.

[unamis76]

Good fingerprint replicas aren't easy to make. They take time and that's probably not feasible in most attack vectors.

Adequate replicas are easy to make. You should do a bit research regarding the sensors used by smartphones these days. Generally, I think a iris scanner would be a better option.

History tells us that systems like Touch ID aren't easy to deceive with fake fingerprints, although it's obviously not impossible to do so. I'm not familiar with systems by other brands, but I assume the same applies. But yes, I agree 100% on retina scanning, as I've also suggested in my post. That would be the future. I'm curious as to what kind of randomness can we "extract" from an iris, as stated in my first post.

But building further on the fingerprint idea: you can further enhance the security of something protected by fingerprinting using one's lips. So 10 fingerprints + lips print would be way much more harder to obtain and it wouldn't make the process of recovering a wallet a bigger burden.

Jut my take on this topic... I think we can explore this much further, whether through the fingerprint topic or through the retina scan topic

[raphma]

i think fingerprints it's not that secure, it can be repliacated easily, by using the victim fingerprint, on any material that he/she may have touched, it's better to do it in another way like retina yes, or particolare code done with some gestures?

It isn't secure. I generally only use it on phones that don't have any sensitive data nor amount of money on them. People leave their fingerprints pretty much everywhere, one would just need to keep watch of where you're going for a few days and would surely be able to reconstruct your fingerprint from some public place (e.g. transport, coffee shop). Additionally, the law enforcement can unlock your device (or gain access to your money in this case) when we are talking about a fingerprint. When we are talking about passwords, they can't force you to give it to them. Depending on the complexity, they may not be able to do anything about it.

cmon guys... i'm sure the fingerprint idea isnt to secure the nacional bank..
it's not like any thief close to you will know how much bitcoins you have and where you keep them..much less know that your password is your fingerprint AND know how to replicate it.

to me, sounds like a great idea. You dont need to generate a random password and memorize/keep it in some place.

[bostiog1]

i think fingerprints it's not that secure, it can be repliacated easily, by using the victim fingerprint, on any material that he/she may have touched, it's better to do it in another way like retina yes, or particolare code done with some gestures?

Good fingerprint replicas aren't easy to make. They take time and that's probably not feasible in most attack vectors.

Not sure I understand what you mean by gestures...

If bitcoin will use fingerprints password they need to have a very very good system for this type of password. Millions of prople are using bitcoin , so there will be millions of fingerprints, there will be lot of errors in log in. Maybe you want to login trough fingerprints but your phone is a bad model and it's scress doesnt reconize you fingerprints.

[Senor.Bla]

i think fingerprints it's not that secure, it can be repliacated easily, by using the victim fingerprint, on any material that he/she may have touched, it's better to do it in another way like retina yes, or particolare code done with some gestures?

It isn't secure. I generally only use it on phones that don't have any sensitive data nor amount of money on them. People leave their fingerprints pretty much everywhere, one would just need to keep watch of where you're going for a few days and would surely be able to reconstruct your fingerprint from some public place (e.g. transport, coffee shop). Additionally, the law enforcement can unlock your device (or gain access to your money in this case) when we are talking about a fingerprint. When we are talking about passwords, they can't force you to give it to them. Depending on the complexity, they may not be able to do anything about it.

cmon guys... i'm sure the fingerprint idea isnt to secure the nacional bank..
it's not like any thief close to you will know how much bitcoins you have and where you keep them..much less know that your password is your fingerprint AND know how to replicate it.

to me, sounds like a great idea. You dont need to generate a random password and memorize/keep it in some place.

trust me these things go down very quick.
maybe a coworker or a friend will overhear a conversation or you are bragging about bitcoin and once he knows where to look it is not that hard anymore. you would be surprised how fast a friendship can end over money.
i also do not like the argument, that we can just use it for small sums. what happens is that it works for small sums and we get used to it so we start using it for big ones too.

[Lauda]

Great idea Lauda! I'll take 3. Just send me a PM when you're doing the beta testing and I'd be happy to lend an eye hand.

I hope that you're not being serious.

But yes, I agree 100% on retina scanning, as I've also suggested in my post. That would be the future. I'm curious as to what kind of randomness can we "extract" from an iris, as stated in my first post.

I'm pretty sure that people around here don't know that there's a difference between retina and iris scans. Retina scanning should provide better security but it does come with higher equipment costs.

But building further on the fingerprint idea: you can further enhance the security of something protected by fingerprinting using one's lips. So 10 fingerprints + lips print would be way much more harder to obtain and it wouldn't make the process of recovering a wallet a bigger burden.

Lip print? That would be very impractical if you ask me, but an interesting suggestion nonetheless.

cmon guys... i'm sure the fingerprint idea isnt to secure the nacional bank.. it's not like any thief close to you will know how much bitcoins you have and where you keep them..much less know that your password is your fingerprint AND know how to replicate it.

You may be right if we are talking about trivial amounts that almost nobody would want to steal anyways. Otherwise you're naive and wrong. People are willing to do all kinds of 'bad' things for money.

[plpbtc1526]

Thats a good idea to have more secured wallet. This would be the best wallet if its created. They will trust wallet more than other wallets. Also wallets that uses iris scanner is good too since some smartphones has iris scanner. Im sure hackers are having hard time unlocking this wallet. Also voice recognition is good too. But i prefer the iris scanner because its not easily be copy unless they remove your eyes and use it to unlock your wallet.

[Hide_ip112]

I just had an idea. What if there is a tool which algorithms create a brain wallet password from the fingerprint (or from multiple fingerprints of the hand)? Every fingerprint is unique. Therefore every password created by the algos will be unique, too.
Thus, one would never run into the risk of losing his or her password anymore. Perhaps there is something already. However, I do not know it.

Wow, amazing idea. This could be an alternative to the security of every wallet bitcoin we have. This is going to get these new ones in the bitcoin: for we will not feel fear when saving bitcoin and will not get a suspicion.

[bostiog1]

I just had an idea. What if there is a tool which algorithms create a brain wallet password from the fingerprint (or from multiple fingerprints of the hand)? Every fingerprint is unique. Therefore every password created by the algos will be unique, too.
Thus, one would never run into the risk of losing his or her password anymore. Perhaps there is something already. However, I do not know it.

Wow, amazing idea. This could be an alternative to the security of every wallet bitcoin we have. This is going to get these new ones in the bitcoin: for we will not feel fear when saving bitcoin and will not get a suspicion.

yea, its a great idea, but think that there will be a lot of error for login because if the screen doesnt reconize just one line from your finger it cant accept the fingerprint

[Yakamoto]

I just had an idea. What if there is a tool which algorithms create a brain wallet password from the fingerprint (or from multiple fingerprints of the hand)? Every fingerprint is unique. Therefore every password created by the algos will be unique, too.
Thus, one would never run into the risk of losing his or her password anymore. Perhaps there is something already. However, I do not know it.

It's a pretty good idea I'd say, and I don't think that anyone has designed a wallet around this concept yet. You might want to look into getting someone to develop the idea or researching if anyone else has put the time in to make something like this. It might be a huge thing if no-one else has done anything with the concept yet.

[bostiog1]

I just had an idea. What if there is a tool which algorithms create a brain wallet password from the fingerprint (or from multiple fingerprints of the hand)? Every fingerprint is unique. Therefore every password created by the algos will be unique, too.
Thus, one would never run into the risk of losing his or her password anymore. Perhaps there is something already. However, I do not know it.

It's a pretty good idea I'd say, and I don't think that anyone has designed a wallet around this concept yet. You might want to look into getting someone to develop the idea or researching if anyone else has put the time in to make something like this. It might be a huge thing if no-one else has done anything with the concept yet.

Anyone designed a wallet with this concept. This will be a huge steps for Bitcoin if it is going to happen