Wallets that replace passwords with biometrics are trading one form of security for a faster one. Thanos Wallet treats biometric unlock as a convenience layer on top of real encryption — not a substitute for it.
Biometric authentication feels secure. It is fast, it is frictionless, and it involves something physically unique to the user. For those reasons, a lot of wallets have started positioning Face ID or fingerprint unlock as the primary security mechanism — the thing standing between an attacker and the user’s funds. That framing has a problem: biometrics are an authentication method, not an encryption method. They verify that the right person is present. They do not protect the underlying data when that person is not.
A wallet secured only by biometric unlock stores its key material in a way that is accessible once the biometric check passes. On a device that is unlocked, or in an environment where the biometric sensor can be bypassed or spoofed, the keys are reachable without the user being meaningfully involved in the security decision. This is a known limitation of biometric-only security models, and it becomes more consequential the more valuable the assets behind the biometric check are.
Thanos Wallet handles this by separating the security layers and assigning each one the right job. The wallet’s key material is protected by AES encryption at rest — a cryptographic protection that applies to the stored data itself, regardless of what state the device is in or whether any authentication check has been passed. On top of that sits password-gated access: a credential the user knows, which gates entry into the wallet independently of the device’s own authentication state. Biometric unlock is then an optional layer on top of that — a way to access the password-protected wallet faster, without typing the password each time, rather than a replacement for the password-protected layer beneath it.
The practical difference is significant. In a biometric-only model, the security chain is: biometric passes, wallet opens. In Thanos Wallet’s model, the security chain is: AES-encrypted vault, unlocked by a password, optionally accessed faster via biometric. Bypassing or spoofing the biometric check in the second model does not open the wallet — it still requires the password. The biometric adds speed; it does not replace the security that was already there.
This distinction also matters for the scenario most wallet users are thinking about when they worry about security: a lost or stolen device. A stolen phone with biometric-only wallet protection is a meaningful risk if the attacker can bypass the device lock or has access to the user’s biometric data. A stolen phone with Thanos Wallet requires the attacker to additionally know the wallet password — a separate credential that does not live on the device and cannot be extracted from it the way biometric templates potentially can.
The reset function completes the picture. When a user wipes the Thanos Wallet vault, the local encrypted data is removed rather than archived. This means that a lost device, once the wallet is wiped, does not retain a recoverable copy of the vault that a sufficiently motivated attacker could work against. The assets remain accessible through the 12-word recovery phrase on any BIP-compatible wallet. The encrypted data on the lost device becomes a dead end.
Security and convenience do not have to be traded against each other — they have to be layered correctly. Biometrics belong in the convenience layer. Encryption and passwords belong in the security layer. Thanos Wallet keeps those two things in their right places, rather than collapsing them into one mechanism that does neither job as well as it should.
Source: https://lithosphere.network/biometrics-arent-a-password-thanos-knows-the-difference/
