Biometric Bypass Module

Streamlines face unlock by skipping biometric confirmation in System UI (Android 10+)

Android 10+ libxposed API 101 Release Build

Get it on F-Droid Get it on IzzyOnDroid Get it on GitHub Get it on Obtainium

Overview

This Xposed module streamlines face unlock by skipping the confirmation step enforced after biometric authentication. The bypass applies system-wide, so it works across all apps, including banking or security-sensitive ones.

By default, even after your face is recognized, Android makes you tap to confirm before it lets you through, turning face unlock into a two-step chore. This module removes that step across all biometric flows, regardless of how each app is built.

How it Works

Android 10 (API 29) added support for passive biometric flows via the setConfirmationRequired(false) flag in the BiometricPrompt API. This lets apps skip the "tap to confirm" step after face unlock, but only if:

  • The app explicitly sets the flag to false
  • The biometric method is classified as Class 3 (strong) (e.g. secure face unlock on Pixel 8+)

Most apps don't set this flag, and even when they do, some components still enforce the confirmation dialog.

This module hooks System UI directly to remove that dialog, simulating the intended behavior system-wide no matter what the app does.

Visual Comparison

Default Behavior Module Enabled
Face unlock requiring manual confirmation Face unlock with confirmation bypassed
Face unlock with manual confirmation required Face unlock with automatic confirmation bypass

Compatibility

  • Android Versions: 10 and up (API 29+)
  • ROM Support: AOSP-based ROMs, Pixel, and other close-to-stock systems. OEM ROMs (e.g. MIUI, OneUI) are not tested and probably won't work due to heavy modifications
  • App Support: Works globally, including banking and security-sensitive apps, by applying the bypass system-wide

Installation

  1. Install Xposed with API 101 support
  2. Download and install the module APK
  3. In your Xposed manager, enable the module and apply it to System UI
  4. Restart System UI or reboot the device

Legacy Xposed Support (Archived)

These branches are unmaintained and only exist for migration or historical reference:

Risks

Bypassing confirmation reduces friction and security. If someone spoofs your face or waves your phone at you while you're asleep, they get in. Use responsibly.

Contributing

Pull requests are welcome. Issues too.

License

MIT. Use it, fork it, misconfigure it.

Releases

v2.0.1

Stable

6/24/2026, 3:49:51 PM

What's Changed

Bug Fixes

Performance Improvements

Refactor

Build

Miscellaneous

Assets

1

v2.0.0

Stable

3/17/2026, 7:13:56 PM

💥 BREAKING CHANGES

  • due to e4aaa4b - migrate to libxposed API 101 (PR #13 by @hxreborn):

    Migrates from libxposed API 100 to 101. API 100 will no longer be supported once 101 is officially released. An LSPosed Manager with API 101 support may not be publicly available yet.

✨ New Features

Assets

1

1/10/2026, 1:03:18 PM

✨ New Features

🐛 Bug Fixes

  • 7f6f6d2 - ci: build libxposed service in addition to api (commit by @hxreborn)
  • 824d0b9 - ci: also publish libxposed interface module (commit by @hxreborn)
  • 3302157 - ci: build only debug in CI (release requires signing) (commit by @hxreborn)
  • 66c3c81 - only use release signing when storeFile is present (commit by @hxreborn)

♻️ Refactors

🔧 Chores

  • 3545c83 - fastlane: add ic_launcher.png as Fastlane icon
  • 8df4c49 - update username references (commit by @hxreborn)

⚠️ This release uses a new signing key. You must uninstall the previous version before installing this update.

Assets

1

4/24/2025, 6:40:53 PM

Biometric Bypass v1.0.1

Fixes and improvements to ensure stable CI builds and consistent packaging.


Changes

  • Java toolchain aligned to JDK 21 (required by libxposed service submodule)
  • Kotlin upgraded to 2.0 for better compatibility with AGP 8.5+
  • Release signing config is now optional and falls back to debug if secrets are missing
  • Removed obsolete CI workflows based on versionCode timestamps
  • Added static PNG screenshot for store listing

ℹ️ No behavioral changes. This release ensures future builds remain stable and compliant across toolchains.

Assets

1

4/19/2025, 12:06:07 PM

Biometric Bypass v1.0.0

Bypasses biometric confirmation dialogs automatically on Android 10+ (minSdk 29)


Changes

  • Signed with proper PKCS#12 release key (APK Signature Scheme v2)
  • Removed DEPENDENCY_INFO_BLOCK
  • Cleaned up debug and metadata
  • Adopted semantic versioning and renamed package

⚠️ Important: If you installed a previous version of this module, uninstall it first before installing this release. The package name and versioning scheme have changed, so updates are not compatible.

Assets

1