hi everyone, we are looking at incorporating NDEF capability into ChipVault. While we’re at it, wanted to ask the community for specific features that you want to see in the app.
please reply and post your feedback here - where we will be tracking communities’ requests.
thanks for the sharing the feedback - we are looking into these.
Can you clarify what you mean by “Maybe here, you give the user the option of the security level THEY are comfortable with” - What options are you suggesting we give? We cannot not have a CMP gate. A CMP is provided by the use and is the master key.
Help me understand better of what you’re suggesting here so we can explore options.
I haven’t watched the video yet. I should do that before making any comments because you might have covered it off in the video.
And I couldn’t get any further in my testing, so I don’t actually know what the limitations are just yet.
However what i’m suggesting is, something similar to the YubiKey model, where NFC can be used as an option to unlock the app.
The core security rules don’t change—the user still sets up a strong Master Password initially to protect the vault.
However, once that setup is complete, the user should get to decide how they unlock it day-to-day—whether that’s re-entering their full password, using biometrics, or tapping an NFC device (like a physical card or implant) rather than forced into a single method.
Again, I haven’t watched the video and I’ll do that shortly so apologies, if it’s already been covered in there
Thread 1 (NFC overlay) — FIXED & submitted for approval: reader mode is now held through the result screen, so Android’s “Choose an action” app-chooser no longer pops over a detected card. Verified on device.
Thread 2 (forced biometrics) — FIXED & submitted for approval: unlock now falls back to your device PIN/pattern when no fingerprint/face is enrolled, ending the lockout. Verified on device.
Really appreciate this, and I hear you on the Apple vibes — that’s the opposite of what ChipVault is meant to be.
A clarifying verbiage will land in the latest build and submission because of exactly this.
A “Why these requirements?” toggle on that screen: your Master Password isn’t a login in front of the encryption — it is the key. No server, no recovery, so its strength is literally your cards’ strength. The minimums are a floor for that reason, not paternalism; above it, how strong you go is your call. And unlock is no longer biometric-only — no fingerprint/face, no problem, you use your device PIN or pattern.
In complete transparency:
I won’t let the password drop below what I’d honestly call secure — with no recovery, that strands people. But a configurable posture above that line is what we’re looking at next, and I’d value your feedback. This is a tool for people who want control of their own hardware resident security and data — that’s the point - your data secured, on your card, in your pocket.
love it - and it’s a natural place to land, since ChipVault already lives on NFC hardware. You’ve captured it right: the Master Password stays the root of trust, and how you unlock becomes your choice. We just took the first step on that axis — the next update (pending google’s review/approval), lets you unlock with PIN or biometric, your pick.
An NFC security-token unlock — YubiKey, card, or implant — is the next step on that same axis, and it’s on the roadmap. I want to be transparent about why it’s a larger and heavier-lift feature and not a quick toggle: unlike biometric/fingerprint or PIN, the OS gives us no built-in “unlock with a tapped token” primitive; consequently, doing it securely means building the token handshake ourselves.
We have it logged as a planned feature for future major release.