Mobile Security & Biometric Lock

Mobile Security & Biometric Lock

A privacy-first, device-native security layer for the Ontourage mobile app — leveraging WebAuthn biometrics rather than proprietary PIN systems.

Biometric Authentication

• Device-native Face ID, Touch ID, or fingerprint via the WebAuthn API
• No proprietary PIN system — uses the operating system's secure biometric prompt
• Per-user opt-in via a toggle switch in Account → Security (never automatic)
• Credentials are scoped per user — each team member controls their own lock

Smart Lock Behaviour

• Locks automatically when the app is backgrounded or the device sleeps
• Unlocked flag persists within a session to avoid repeated prompts
• Returning users with credentials are prompted on app launch
• Users without credentials pass through uninterrupted

Branded Lock Screen

• Custom LockScreen with the Ontourage gradient logo
• Biometric prompt delegated to AppLockProvider to prevent duplicate OS prompts
• Graceful fallback for devices without biometric hardware
• Session-aware — doesn't lock during active multi-tasking