Configuring Enterprise PBKDF2 PIN & BiometricStrong Security
Protect your counter tablet with 4-digit PBKDF2 PIN, hardware fingerprint authentication, exponential lockout, and clipboard auto-clearing.
Step-by-Step Instructions
Open Security & App Lock Settings
Navigate to Settings > 'Security & PIN Lock'.
Configure 4-Digit Owner PIN
Set a 4-digit PIN. JewelBill hashes the PIN using PBKDF2 with HMAC-SHA256 (65,536 iterations and a 16-byte cryptographically secure random salt).
Enable Hardware Biometric Authentication
Toggle 'Biometric Unlock' to allow instant fingerprint or face unlock using AndroidX BiometricPrompt (`BIOMETRIC_STRONG`).
Enforce Auto-Session Lock & Lockout Tiers
JewelBill locks automatically after 2 minutes in the background or 5 minutes of counter inactivity. 5 failed PIN attempts trigger exponential lockout (30s → 5m → 30m → 24h).
Automatic Clipboard Sanitization
When you copy customer phone numbers or bank details, JewelBill's `SecureClipboardUtils` automatically wipes the Android clipboard after 30 seconds.
Expected Outcome
Counter staff, walk-in shoppers, or unauthorized persons cannot view gold turnover, customer khata balances, or profit margins.
Important Points & Common Pitfalls
- Sharing the master 4-digit PIN with temporary counter helpers.