Google adds support for fingerprint sensors on Android phones and Touch ID on Macs to Chrome 70 beta, allowing developers to use biometrics for authentication
Unless otherwise noted, changes described below apply to the newest Chrome Beta channel release for Android, Chrome OS, Linux, macOS, and Windows.
Context & Ripple Effects
This is the moment biometric auth reaches the browser itself. Google put fingerprint readers into Android back in 2015 with its plan to add fingerprint authentication to the next version of Android, and three years later Chrome 70 beta extends that hardware to the web layer, letting developers authenticate users with fingerprints on Android phones and Touch ID on Macs rather than passwords.
The move matters because the browser is where Google's account infrastructure lives — and the coverage since shows a steady build-out on this foundation, from biometrically gated Autofill for credit cards in 2020 to passkey sign-in on Android and Chrome in 2022.
First-order effects
- Developers building web apps for Android and macOS can now offer fingerprint and Touch ID login through Chrome 70 beta, replacing password entry with local biometric verification.
- Users on fingerprint-equipped Android phones and Touch ID Macs get an immediate alternative to typed credentials inside the browser.
Second-order effects
- Google's own surfaces become the first beneficiaries: the same plumbing later gates Chrome Autofill card entry behind biometrics on Android and protects Incognito tabs with Face ID and Touch ID on iOS, turning the feature into a platform-wide security layer.
- Rival browsers face pressure to expose equivalent platform authenticator APIs, since sites will increasingly expect biometric login to work regardless of which engine renders them.
Third-order effects
- If the pattern holds toward its logical endpoint, the credential itself migrates off servers entirely — the 2022 passkey rollout on Android and Chrome replaces synced passwords with device-bound cryptographic keys unlocked by the same biometrics introduced here.
- Authentication authority shifts from websites' own password databases to OS-level biometric stacks, weakening phishing-based account takeover as a viable attack class across the web.
The trend: Browsers are absorbing authentication from website-managed passwords to OS-level biometrics and passkeys, with Google sequencing each step from Android hardware through Chrome APIs to passwordless sign-in.