[APP][6.0+] Remote Fingerprint Unlock - unlock your Windows PC with your fingerprint

Search This thread

Andrew-X

Senior Member
Feb 26, 2014
77
198
Hello guys!

Tired of typing your password each time you want to unlock your computer?

After months of work, I have finally launched my project, Remote Fingerprint Unlock, which allows you to remotely wake up and unlock your Windows computer with a single fingerprint tap!

Features:
• Simple, user-friendly UI
• Secure
• Local/Microsoft/Domain** accounts supported
• 3 app themes - Light, Dark, Black (AMOLED)
• Wi-Fi/Bluetooth/Wi-Fi Tethering support

**1.2.0 version of the Windows module required. Usage: when adding an account using the Android app, simply add the full name of the account, including the domain, separated by a slash ( ‘\’ ). For example: test\account.name

PRO features:
• Ads removal
• Unlimited computers and account per computer
• Wake-On-Lan
• Unlock widgets - can be linked to any account, useful if you have more computers that you want to unlock
• Launcher shortcuts - same as widgets, can be used by long-tapping the app icon or can be pinned like any other launcher shortcut
• More planned features

With that being said, here is the link to the app: Google Play or XDA Labs

The Windows module, found at http://bit.ly/2Q4YoUP is required for the app to work. Please be sure to check for updates from time to time as they can contain fixes and add new features. The changelog can be found at the same link.

The app was featured on XDA News, thanks to the guys at XDA! :highfive: So, if you think that you need such a tool, be sure to give it a try!

Lastly, any question that you may have, be it about how the app works, how to use it or if you are just leaving feedback, don't hesitate posting it here! Thanks for taking the time to check the app!

Security

The communication between modules is secured using TLS (SSL). The accounts are stored on your computer as they are required when unlocking. However, they are encrypted using a key that is generated based on your fingerprint. As per this article, the generated key is backed by a Trusted Execution Environment, which prevents an attacker from gaining access to the key even if he had compromised the kernel. In other words, only the enrolled fingerprints on your phone can access the key. If you do uninstall, reset your app or even if you change one of your registered fingerprints, the file where the accounts are stored is lost forever and you will need to reconfigure your accounts.

Lastly, research has been done to ensure that, even locally, your accounts are as safe as possible. No password is stored in-app and everything is done locally (between the app and the Windows module) and I'm not, in any way, shape or form, sending through the Internet or seeing anything that you type in-app.

Basic troubleshooting

If you cannot find you computer in the Scan menu, please check the following:
  • Be sure that the module is present on your logon screen. For example, on Windows 10, you should see it on the lower left corner of the screen. If you installed the program and it still isn’t present, please leave a reply, send me a PM or an email.
  • If you have a different firewall than Windows Firewall, please be sure that you have allowed all incoming and outgoing traffic on both TCP and UDP for LogonUI.exe process, found in C:\Windows\System32.
  • Be sure that both your computer and your smartphone are connected to the same network which assigns IP addresses on the same subnet. For example, both devices should have an IP starting with the same subnet prefix: 192.168.1.
  • If you have blocked ports on your network, be sure to allow port 4009 on both TCP and UDP for the app to function correctly.

If you added an account but unlocking does not work, please check the following:
  • If you are using a Microsoft account: if you tried adding an account, used your email address and it does not work, please update the Windows module to at least 1.0.2, which supports logging in a user using the displayed account name on the lockscreen. When adding an account in-app, try again by using the displayed name of that Microsoft account (the First and Last names).
  • If you are using a local account on Windows Vista or 7, you may have changed your account name in the past. Internally, Windows does not change the username so you need to type in the original username.
    If you can’t remember it, just open a Command Prompt and type 'whoami’. The username that will be displayed is the one that the app will need.
    You can also check how your personal user folder is called. It can be found in C:\Users.
    On Windows 8 and 10, have at least the 1.0.2 version installed and simply add an account using the displayed name on the lockscreen.

Setting up/Testing Wake On Lan (PRO feature)
To enable WoL on your computer, you can follow the steps here. To enable WoL on your computer, follow the first part. After that, you can continue with the same tutorial if you have another computer available, or you can download this app on your Android phone to test it.

To send the WoL signal using the app, simply go to the saved computers, tap on the desired computer, tick Send WoL-Packet and Save. There is no need to configure anything as your MAC address is automatically detected when you add your computer. The wake-up signal will now be sent each time you unlock one of the accounts on that PC.

Take into consideration that on some computers, you may also need to enable WoL in your BIOS settings and that it may work only on certain states like being fully shut down, hibernated or sleeping. There is nothing I can do about it, unfortunately, as it depends on your PC. Thanks for understanding!

 

Attachments

  • windows_unlock_screenshot.jpg
    windows_unlock_screenshot.jpg
    63.5 KB · Views: 25,818
  • Screenshot_2019-05-28-23-50-32.jpg
    Screenshot_2019-05-28-23-50-32.jpg
    174.9 KB · Views: 3,980
  • Screenshot_2019-05-28-23-50-25.jpg
    Screenshot_2019-05-28-23-50-25.jpg
    175.8 KB · Views: 3,829
  • Screenshot_2019-05-28-23-50-59.jpg
    Screenshot_2019-05-28-23-50-59.jpg
    143.5 KB · Views: 3,514
  • Screenshot_2019-05-28-23-54-29.jpg
    Screenshot_2019-05-28-23-54-29.jpg
    227.1 KB · Views: 3,437
Last edited:

Andrew-X

Senior Member
Feb 26, 2014
77
198
So the fingerprint is saved on your server? How can we make sure that it will not be exploited?

No! Actually it is not! The fingerprint verification is only done locally using only your phone's secure hardware. This is all that Android Fingerprint API's allow a developer to do: they just report back if a scanned fingerprint is found on a phone's system or not and the unique key that is generated when you first scan your fingerprint can be accessed only if there was a successful fingerprint scan.

So all of this part is done using Android's Fingerprint API. There is no back-end involved in any of this. With the exception of crash logs and ads, the Android app and the Windows module only communicate with each other.

Hope that it clarifies some of the aspects! Feel free to reply back if you have any other questions.
 

scissorscrush

Senior Member
Aug 18, 2013
382
46
No! Actually it is not! The fingerprint verification is only done locally using only your phone's secure hardware. This is all that Android Fingerprint API's allow a developer to do: they just report back if a scanned fingerprint is found on a phone's system or not and the unique key that is generated when you first scan your fingerprint can be accessed only if there was a successful fingerprint scan.

So all of this part is done using Android's Fingerprint API. There is no back-end involved in any of this. With the exception of crash logs and ads, the Android app and the Windows module only communicate with each other.

Hope that it clarifies some of the aspects! Feel free to reply back if you have any other questions.
Good dude. Gonna try it now and will report back ?
 
  • Like
Reactions: Andrew-X

Andrew-X

Senior Member
Feb 26, 2014
77
198
Unsuccessful. Could not add the account. Tried both pin and password.

Sorry to hear that. You can't add an account in-app or you can add it but it does not unlock your computer? Also, are you using a Microsoft account or have you changed you account username sometime in the past?
 

scissorscrush

Senior Member
Aug 18, 2013
382
46
Sorry to hear that. You can't add an account in-app or you can add it but it does not unlock your computer? Also, are you using a Microsoft account or have you changed you account username sometime in the past?
Can't add the account in the app. When I fill the details (account and password) it disappears and I get a notification up top that the command is sent, waiting for computer to reply. But nothing appears in the account list within the app. Using a local account (admin) and no changes in the past 2 years.
 

Andrew-X

Senior Member
Feb 26, 2014
77
198
Can't add the account in the app. When I fill the details (account and password) it disappears and I get a notification up top that the command is sent, waiting for computer to reply. But nothing appears in the account list within the app. Using a local account (admin) and no changes in the past 2 years.

Ok, just to be sure. Is your computer locked (not on the desktop, but on the login screen) when you are trying to add an account?

Edit: oh, yeah. That notification does not affect the adding operation, but it should not appear when adding an account. Thanks for helping me discover a little bug, lol
 
Last edited:
  • Like
Reactions: ali nz

scissorscrush

Senior Member
Aug 18, 2013
382
46
Ok, just to be sure. Is your computer locked (not on the desktop, but on the login screen) when you are trying to add an account?

Edit: oh, yeah. That notification does not affect the adding operation, but it should not appear when adding an account. Thanks for helping me discover a little bug, lol
Lol looks like you got some work to do ?
 

scissorscrush

Senior Member
Aug 18, 2013
382
46
Already solved it :p But have you managed to add your account? If not, have you added the firewall exceptions for the LogonUI.exe process? (If you are using something else than Windows Firewall)
Sadly no. The firewall exceptions were created properly. The lock screen was on. No Antivirus on either devices. It might not be a firewall issue because the app was able to communicate with the computer.
 

Andrew-X

Senior Member
Feb 26, 2014
77
198
Can't find my PC windows 10 in scan. No firewall in the computer, should i enable bluetooth in both devices or what??

It only works on local networks (Wi-Fi/Wired) at the moment, so both your Android device and your computer should be on the same network to communicate with each other.
Also, do you have your computer on it's lockscreen when scanning? (not on dekstop)
 

spring80

Senior Member
Jul 11, 2009
663
183
It only works on local networks (Wi-Fi/Wired) at the moment, so both your Android device and your computer should be on the same network to communicate with each other.
Also, do you have your computer on it's lockscreen when scanning? (not on dekstop)
Yes it is on lockscreen when scanning, i have main firewall in our network, so which port should i open in this firewall??
 

spring80

Senior Member
Jul 11, 2009
663
183
When i use home wireless network (no main firewall), it is working, but inside my work network which have main firewall, it is not working. I already open port 4009 (tcp/udp),same result
 

Andrew-X

Senior Member
Feb 26, 2014
77
198
When i use home wireless network (no main firewall), it is working, but inside my work network which have main firewall, it is not working. I already open port 4009 (tcp/udp),same result

Can you please check what IP's are your computer and your given when connected to your work network?
 

spring80

Senior Member
Jul 11, 2009
663
183
Can you please check what IP's are your computer and your given when connected to your work network?
The both IPs are in same network, my mobile and my pc, problem from my main network firewall, if i use different network (without firewall), it is working. By the way i am using Kerio control as my main network firewall
 

Top Liked Posts

  • There are no posts matching your filters.
  • 83
    Hello guys!

    Tired of typing your password each time you want to unlock your computer?

    After months of work, I have finally launched my project, Remote Fingerprint Unlock, which allows you to remotely wake up and unlock your Windows computer with a single fingerprint tap!

    Features:
    • Simple, user-friendly UI
    • Secure
    • Local/Microsoft/Domain** accounts supported
    • 3 app themes - Light, Dark, Black (AMOLED)
    • Wi-Fi/Bluetooth/Wi-Fi Tethering support

    **1.2.0 version of the Windows module required. Usage: when adding an account using the Android app, simply add the full name of the account, including the domain, separated by a slash ( ‘\’ ). For example: test\account.name

    PRO features:
    • Ads removal
    • Unlimited computers and account per computer
    • Wake-On-Lan
    • Unlock widgets - can be linked to any account, useful if you have more computers that you want to unlock
    • Launcher shortcuts - same as widgets, can be used by long-tapping the app icon or can be pinned like any other launcher shortcut
    • More planned features

    With that being said, here is the link to the app: Google Play or XDA Labs

    The Windows module, found at http://bit.ly/2Q4YoUP is required for the app to work. Please be sure to check for updates from time to time as they can contain fixes and add new features. The changelog can be found at the same link.

    The app was featured on XDA News, thanks to the guys at XDA! :highfive: So, if you think that you need such a tool, be sure to give it a try!

    Lastly, any question that you may have, be it about how the app works, how to use it or if you are just leaving feedback, don't hesitate posting it here! Thanks for taking the time to check the app!

    Security

    The communication between modules is secured using TLS (SSL). The accounts are stored on your computer as they are required when unlocking. However, they are encrypted using a key that is generated based on your fingerprint. As per this article, the generated key is backed by a Trusted Execution Environment, which prevents an attacker from gaining access to the key even if he had compromised the kernel. In other words, only the enrolled fingerprints on your phone can access the key. If you do uninstall, reset your app or even if you change one of your registered fingerprints, the file where the accounts are stored is lost forever and you will need to reconfigure your accounts.

    Lastly, research has been done to ensure that, even locally, your accounts are as safe as possible. No password is stored in-app and everything is done locally (between the app and the Windows module) and I'm not, in any way, shape or form, sending through the Internet or seeing anything that you type in-app.

    Basic troubleshooting

    If you cannot find you computer in the Scan menu, please check the following:
    • Be sure that the module is present on your logon screen. For example, on Windows 10, you should see it on the lower left corner of the screen. If you installed the program and it still isn’t present, please leave a reply, send me a PM or an email.
    • If you have a different firewall than Windows Firewall, please be sure that you have allowed all incoming and outgoing traffic on both TCP and UDP for LogonUI.exe process, found in C:\Windows\System32.
    • Be sure that both your computer and your smartphone are connected to the same network which assigns IP addresses on the same subnet. For example, both devices should have an IP starting with the same subnet prefix: 192.168.1.
    • If you have blocked ports on your network, be sure to allow port 4009 on both TCP and UDP for the app to function correctly.

    If you added an account but unlocking does not work, please check the following:
    • If you are using a Microsoft account: if you tried adding an account, used your email address and it does not work, please update the Windows module to at least 1.0.2, which supports logging in a user using the displayed account name on the lockscreen. When adding an account in-app, try again by using the displayed name of that Microsoft account (the First and Last names).
    • If you are using a local account on Windows Vista or 7, you may have changed your account name in the past. Internally, Windows does not change the username so you need to type in the original username.
      If you can’t remember it, just open a Command Prompt and type 'whoami’. The username that will be displayed is the one that the app will need.
      You can also check how your personal user folder is called. It can be found in C:\Users.
      On Windows 8 and 10, have at least the 1.0.2 version installed and simply add an account using the displayed name on the lockscreen.

    Setting up/Testing Wake On Lan (PRO feature)
    To enable WoL on your computer, you can follow the steps here. To enable WoL on your computer, follow the first part. After that, you can continue with the same tutorial if you have another computer available, or you can download this app on your Android phone to test it.

    To send the WoL signal using the app, simply go to the saved computers, tap on the desired computer, tick Send WoL-Packet and Save. There is no need to configure anything as your MAC address is automatically detected when you add your computer. The wake-up signal will now be sent each time you unlock one of the accounts on that PC.

    Take into consideration that on some computers, you may also need to enable WoL in your BIOS settings and that it may work only on certain states like being fully shut down, hibernated or sleeping. There is nothing I can do about it, unfortunately, as it depends on your PC. Thanks for understanding!

    14
    Dev here! Thank you all for trying and supporting the app! I really means a lot. I have been replying to emails and reviews for the past 2 days, so please understand if it takes a bit for me to answer your questions. I am reading all your questions and ideas, so I would like to clarify most of them here:

    The "No default account set" problem: I am aware that many people get stuck on this and I will fix it in the upcoming update. For new users, simply tap on the account name that you just added in the Accounts menu and you are good to go!
    Windows PIN support: Many of you would like to use the PIN instead of the password when using the app. Unfortunately, I don't think that this is possible because Windows expects an username and the corresponding password in order to initiate a logon. Actually, the PIN feature on Windows is just another logon module, just like the one I developed. I will do some research and try to see if I can somehow make the app also support PINs.
    Domain support: As many of you have already noticed, domains are not supported yet. However, I have it working on my end, but there are a few things that I would like to improve before releasing it in an update. Expect it very shortly after the widget update.
    Unlocking over the internet/using Mobile Data: As you may have already seen, the app does only work when both the computer and the phone are on the same network. I have the feature on my list of future updates, but it will probably take some time to implement as this surely isn't an easy task to do.
    Tasker support: I know that Tasker is a great tool and I have seen a few people request support for it, so I have taken it into consideration. It won't take long before you will see Tasker support ready to go!
    Bluetooth support: It is on the list of future updates, but it will probably take a little while before support for it will be added.
    Custom subnets: At the moment, the app works with the standard /24 subnet mask, where the broadcast address ends with .255. However, I have already implemented support for getting the broadcast address based on any IP and subnet mask and it will be included in the upcoming widget update.
    Fingerprint scanning errors: Some manufacturers do not fully implement Android's Fingerprint API and while you can use you fingerprint to unlock your phone, my app also needs to encrypt and decrypt keys based on your fingerprint. Usually, this happens on phones from Chinese manufacturers. I do have a workaround that I'm going to implement and test, but I don't know if it will work or not other than that, there isn't anything else that I can do, as it doesn't depend on me. Sorry.
    PRO not being enabled after purchase: If you somehow don't get PRO to enable after you have purchased it, please restart your phone/wait a few hours and then check again. If it still doesn't work, send me an email at [email protected] with your Order ID and I will refund your purchase.
    Uninstalling the Windows module: A few users have asked how to uninstall the module: simply proceed like any other application from your computer. You can find the uninstall shortcut in the Start Menu or you can go to Control Panel -> Programs and Feature where you will find the Remote Fingerprint Unlock Module.

    I hope that I clarified some of your questions. If you encounter problems, please check the FAQ, especially the 5th, 7th and 8th points and also search the thread for a solution as other people may have had the same problem (thanks to community members that helped with troubleshooting!). Have a great day!
    13
    So the fingerprint is saved on your server? How can we make sure that it will not be exploited?

    No! Actually it is not! The fingerprint verification is only done locally using only your phone's secure hardware. This is all that Android Fingerprint API's allow a developer to do: they just report back if a scanned fingerprint is found on a phone's system or not and the unique key that is generated when you first scan your fingerprint can be accessed only if there was a successful fingerprint scan.

    So all of this part is done using Android's Fingerprint API. There is no back-end involved in any of this. With the exception of crash logs and ads, the Android app and the Windows module only communicate with each other.

    Hope that it clarifies some of the aspects! Feel free to reply back if you have any other questions.
    9
    Hi again, guys! The new 1.2 update should be live in a few hours on Google Play and XDA Labs! Changes include:

    • Connecting to a computer by specifying its IP - useful if your computer has a static IP/is not on the same subnet as your phone but can communicate with each other or if scanning doesn't find your computer
    • Editing the MAC and Port of the Wake On Lan packet for each saved computer
    • Option to Forcefully Delete a computer (without connecting to it) - useful if you don't have your computer anymore, reinstalled Windows, etc. and you would like to remove the entry from the app
    • Behind the scenes improvements to stability and security

    Also, on the unlock ad, video ads were disabled about a month ago but I somehow still received reviews which specify that ads are loud. I know that video ads with sound are annoying (I use apps too :) ) so I disabled the sound in code. This should not longer be a problem!

    Lastly, the next feature I'll be working on is support for Bluetooth connections so be sure to check back, BT users! :)

    With this occasion, I would like to wish you Happy Holidays! See you again soon!
    9
    Progress update

    Hi again, guys. Just wanted to let you know that I'm almost done with the update. I just have the widget design to work on, some bug fixes and that's all. I know that much more time has passed since I posted the first ETA, but I've been pretty busy with life lately (moved to another city, applied to some jobs, had some interviews, etc. ). Sorry for that. Rest assured that I'm still working and will work on the app for the foreseeable future. I have attached some screenshots so you can see the progress. As you can see, there are 3 types of widget themes, which means that the main app also got a new theme :D

    I cannot become authorized in RDP of a session(says incorrect password), please fixed

    thanks

    I suddenly cannot use RD anymore since using this program. This needs to be fixed.

    One question (I don't read all the thread).
    Is it possible to unlock the computer outside the lan with mobile data ?
    example : I have a NOIP account that give me a pubblic address for my PC.
    Can I wake up my pc with mobile data and unlock it inside your app ?

    edit:
    Maybe a big problem.
    The win app lock the user who is connected in windows and the other android app can't share files with the PC.
    example : ES explorer that I always use to transfert file from/to PC do not reach the PC anymore and ever ask me username and password (in my PC I have only an authorized user).
    Also if I insert the right credential many times I can't get the PC.

    Now I create a new user in my PC and I can enter in my PC files again with ES Explorer in my phone, via wi-fi. But only with the new user credentials.
    Can you solve this issue?

    I am aware of the problem. It looks like logging in with my app on a Microsoft account causes related services that use that logon to not work. That's a pretty strange thing, but I'm working to see what may cause this and fix it as soon as possible. Sorry for the inconveniences.

    Have a great day!
Our Apps
Get our official app!
The best way to access XDA on your phone
Nav Gestures
Add swipe gestures to any Android
One Handed Mode
Eases uses one hand with your phone