Biometric Bypass

This LSPosed module streamlines face unlock by skipping the confirmation step required after biometric authentication. It applies the bypass system-wide, so it works across all apps, including banking and other security-sensitive ones.

Android introduced the setConfirmationRequired(false) flag in Android 10 to support passive authentication flows (e.g., face unlock without a tap). Since most apps don’t explicitly disable confirmation, Android defaults to requiring a manual tap, turning face unlock into a two-step process.

This module ensures the confirmation step is skipped across all biometric flows, regardless of app implementation.

How it Works

Android 10 (API 29) added support for passive biometric flows via the setConfirmationRequired(false) flag in the BiometricPrompt API. This allows apps to skip the "tap to confirm" step after face unlock—but only if:

- The app explicitly sets setConfirmationRequired(false). - The biometric method is classified as Class 3 (strong), such as secure face unlock on Pixel 8+.

Most apps don’t set this flag, and even when they do, some system components may still enforce the confirmation dialog.

This module hooks into System UI directly to eliminate that dialog, simulating the intended behavior system-wide, regardless of the app.

Compatibility

- Android Versions: 10 and up (API 29+) - ROM Support: AOSP-based ROMs, Pixel, and other close-to-stock systems. - OEM ROMs (e.g., MIUI, OneUI): Not tested and likely incompatible due to heavy modifications. - App Support: Works globally, including banking and security-sensitive apps, by applying the bypass system-wide.

Installation

1. Install LSPosed. 2. Download and install the module APK. 3. In LSPosed, enable the module and apply it to System UI. 4. Restart System UI or reboot the device.

⛔ Risks

Bypassing the confirmation step reduces friction at the cost of security. If someone spoofs your face or waves your phone in front of you while you’re asleep, they could gain access. Use responsibly.