diff --git a/static/features.html b/static/features.html
index 55e77e64..0661fde1 100644
--- a/static/features.html
+++ b/static/features.html
@@ -118,6 +118,8 @@
PIN scrambling
Supports longer
passwords
+ More secure fingerprint
+ unlock
Improved user profiles
@@ -600,6 +602,21 @@
digit PIN.
+
+
+
+ GrapheneOS improves the security of the fingerprint unlock feature by only
+ permitting 5 total attempts rather than implementing a 30 second delay between
+ every 5 failed attempts with a total of 20 attempts. This doesn't just reduce
+ the number of potential attempts but also makes it easy to disable fingerprint
+ unlock by intentionally failing to unlock 5 times with a different finger.
+
+ GrapheneOS also adds support for using the fingerprint scanner only for
+ authentication in apps and unlocking hardware keystore keys by toggling off
+ support for unlocking. This feature already existed for the standard Android
+ face unlock feature.
+
+
@@ -658,11 +675,6 @@
- Improved user visibility into persistent firmware security through version
and configuration verification with reporting of inconsistencies and debug
features being enabled.
- - Stricter implementation of the optional fingerprint unlock feature permitting
- only 5 attempts rather than 20 before permanent lockout (our recommendation is
- still keeping sensitive data in user profiles without fingerprint unlock)
- - Support for using the fingerprint scanner only for authentication in apps
- and unlocking hardware keystore keys by toggling off support for unlocking.
- Vanadium: hardened WebView and default browser — the WebView is what most
other apps use to handle web content, so you benefit from Vanadium in many apps
even if you choose another browser