Who you are
beats what you know.

BioVault is a multi-modal biometric authentication MVP. It combines face, voice, keystroke rhythm, and a hardware-backed passkey into a single risk-adaptive trust score, computed live in the browser and on a stateless Cloud Run backend.

1

Pick or create an identity

In-memory only. No data persists.
2

Enroll biometric factors

Select a user first.
Face

Facial recognition + liveness

Local 128-D descriptor (face-api.js). Liveness via blink challenge. No image leaves your device.
Not enrolled
Voice

Voice biometrics

Speak the phrase. We extract spectral features in-browser and compare to your enrolled vector.
"My voice is my password, verify me."
Not enrolled
Keystroke

Typing rhythm

Your dwell + flight time across a fixed passphrase. The fingerprint nobody can record.
Not enrolled
Passkey

WebAuthn passkey

Hardware-backed factor. Touch ID / Windows Hello / security key. Phishing-resistant by design.
Not enrolled
3

Adaptive risk decision

Weights: face 0.35 · passkey 0.30 · voice 0.20 · keystroke 0.15

After at least one verification, BioVault aggregates available factor scores into a trust value, then maps it to an allow / step-up / deny action.

No decision yet trust=0.000
4

Live audit feed

Auto-refreshes every 3s · in-memory · capped at 500 events