How to disable warning of the new fingerprint?

[octvs]

Hey there,

First of all, thank you for the effort & work went into this fork. The archival
of APS was sad-news, I was really happy to see an update land on F-Droid.

I receive a warning message from the app after I enrolled a new fingerprint to
my phone. The second fingerprint was added after the app was setup and
functioning and now every time I decrypt a secret I face

Warning! New fingerprint added

A new fingerprint has been registered in the device lock settings...

which is clearly invoked over here

It is a necessary warning, however I'm sure I added the fingerprint. Now how do
I get rid of it? Disabling fingerprint unlock and re-enabling didn't help.

[agrahn]

Yes, that message is issued on purpose to warn you about a new fingerprint that might have been enrolled by a malicious user that has physical access to your mobile device. It would allow them to unlock the cached PGP passphrase with their fingerprint. To get rid of that message, just confirm the enrollment by entering the PGP passphrase again.

[octvs]

Thanks for the response. Now it is handled, my bad.

I couldn't get it to let me enter the passphrase. I tried disabling fingerprint
authentication and resetting cache to no avail. Turns out I set an empty
passphrase on my key, hence it wasn't asking me to provide the passphrase after
the mentioned message, and kept showing the message constantly.

The empty passphrase: I wanted to retain the old behaviour from the previous
repo regarding caching of the passphrase. The change I mention here is
elaborated on last sentence here.

[agrahn]

Oh, I did not consider the possibility that someone would generate and use an unprotected PGP key. (Which is a really bad idea.) Would you consider to go back to using a passphrase-protected PGP key? Then your question may be taken as resolved, I think.

[octvs]

Oh, I did not consider the possibility that someone would generate and use an
unprotected PGP key. (Which is a really bad idea.)

Indeed it would be.

Would you consider to go back to using a passphrase-protected PGP key?

My main pgp key has a prety strong passphrase that would be a pain to insert
w/o passphrase caching as in the old version. Hence I opted for creating a new
identity for APS and limiting its access. Thanks for the sincere concern.

Then your question may be taken as resolved, I think.

Forgot to mark it as such, sorry.

[agrahn]

BTW, you can change the key passphrase within the app (Settings --> PGP settings --> Key manager --> three-dots-menu on the right of the key).

[octvs]

BTW, you can change the key passphrase within the app (Settings --> PGP settings --> Key manager --> three-dots-menu on the right of the key).

Oh yeah, I figured this while fiddling. Which is how I triggered it to ask me
and ended up getting rid of the message.

I'm leaving this question with all its verbosity here in case somebody else
ends up in the same situation. Although seeing how dumb my case was, it seems
unlikely. Nevertheless if such a person reads this message in future: Hi, you
are not alone.

A final thanks to @agrahn for the kind correspondence.