Fingerprint login/KDE wallet
Open, WishlistPublic

Description

Description

  • fingerprint sensors have never been fully integrated into SDDM
  • Fingerprint sensors are becoming more common and should be accommodated
  • if this were fixed it would allow for much smoother operation.
  • all I really ask is for fingerprint sensor works for logging into both login and KDE wallet

What it will take

currently fingerprint works only after you press enter on the login page. so, make fingerprints available on boot up, and also remove the 15 second "cool down" that happens when you type in the password with an active fingerprint.

How we know we succeeded

  • if you boot up your computer and are immediately able to use your fingerprint sensor on login screen.
  • if you do not see KDE wallet pop up after fingerprint login.
  • if you type in your password instead of using the fingerprint sensor, it will login immediately.
  • if you type in the wrong password, it wont take an unreasonable amount of time before you can retry.

Relevant links

Fingerprint login on Plasma is a nightmare

Champions

none selected. contact me @ abbottmc5@gmail.com if your interested.

The team is:

  • XXX
  • XXX
  • XXX

I am willing to put work into this

  • add your name

I am interested

  • add your name
spydragon triaged this task as Wishlist priority.
spydragon updated the task description. (Show Details)Jun 12 2024, 6:11 AM
spydragon updated the task description. (Show Details)Jun 12 2024, 6:15 AM
spydragon updated the task description. (Show Details)
spydragon updated the task description. (Show Details)
spydragon updated the task description. (Show Details)Jun 12 2024, 6:18 AM
spydragon updated the task description. (Show Details)Jun 12 2024, 6:20 AM
nerumo added a subscriber: nerumo.Jun 13 2024, 6:24 AM

In general, the SDDM should be more tightly integrated into the KDE experience (as I heard, this is already the plan).

lydia added a subscriber: lydia.Jun 14 2024, 6:16 PM

Each goal needs Champions. If no-one is found it will unfortunately not be eligible for voting.
In general this looks too narrow for a goal at this point and is more a feature request. A goal is something a large part of the KDE community can get behind and work on over the next 2 years.

I agree that the current scope is quite narrow and seems more like a feature request. However, a few other things which could be added would be support for FIDO login and in general any non-password based login method. Similarly, the scope of KDE Wallet could be expanded to support TOTP etc.

PS: Of some interest might be pam_systemd_loadkey.so (since systemd v255) which will allow unlocking of KDE Wallet when using full disk encryption together with autologin.

mrjulius added a subscriber: mrjulius.EditedJul 5 2024, 8:50 AM

Perhaps this is not a grand goal by itself, but could this be viewed as part of the accessibility goal? (As accessibility also encompasses usability improvements that enhance the overall flow)

The current login behavior described by the author, adds an inconvenience of 5-10 seconds each time you use KDE compared to the big-tech operating systems. Having SDDM work as the author suggested would have a huge cumulative benefit for a wide base of users.

Additional thoughts:
Imagining the ultimate solution, we could even set the UEFI startup fingerprint (that would bypass bios password, SED/OPAL2 encryption password and log automatically to OS.
While this is not as secure as a long password, in practice it encourages for longer passwords, and not typing them publicly, also this can be supplemented with a short password, smart card etc..).
As security is always a balance between threat and convenience, fingerprint in a 2FA setup brings fairly high amount of security for very little cost in convenience.

Perhaps this is not a grand goal by itself, but could this be viewed as part of the accessibility goal? (As accessibility also encompasses usability improvements that enhance the overall flow)

I would not classify fingerprint support as an accessibility feature, no

frdbr added a subscriber: frdbr.Jul 29 2024, 3:53 PM
frdbr added a comment.Aug 12 2024, 7:38 PM

Hello,

Please note that the deadline just around the corner on Wednesday, so now is the time to finalize your proposal. Remember that proposals without a Goal Champion will be disqualified, so this step is crucial to ensure your idea moves forward. If you need help or have any questions, please let me know.

If you’re unable to finish your proposal but still want to participate, consider contributing to other ongoing tasks.

Thank you for submitting your ideas for the KDE Goals!

mcarans added a subscriber: mcarans.EditedAug 14 2024, 9:33 PM

This is very much needed. It would be great to be able to use fingerprint or type password immediately both at login and when requesting root after login. Currently, with difficulty it is possible to set things up so that one entry method has to fail before the other is offered. Both should be offered at once.