How does a fingerprint door lock work? Security, offline mode and privacy

A fingerprint door lock opens the door by comparing the presented finger with a previously enrolled pattern — but, contrary to intuition, it does not do this from a "photo" of your finger. The device stores an irreversible mathematical template and performs the whole comparison locally. In this guide we explain how a fingerprint reader in a door lock works, where the biometric data goes, why offline mode is an advantage rather than a limitation, and what to look for when buying.

How does a fingerprint reader in a lock work?

The biometric sensor — most often capacitive — scans the pattern of ridges and valleys on your fingertip. From that image the algorithm extracts so-called minutiae: the characteristic points where ridges branch and end, and their relative positions. This produces a template — a compact mathematical record, a kind of digital "signature" of your finger.

The key point: the template is one-way. You cannot rebuild an image of the fingerprint from it, just as you cannot recover a file from its checksum. On every unlock the lock creates a fresh template from the presented finger and compares it with the enrolled patterns. If the match exceeds a threshold, the door opens. The whole process happens inside the device, without sending anything outside.

Is biometric data safe? Privacy and GDPR

This is a question asked more often in Germany and the Nordics than the price — and rightly so. Under GDPR, biometric data is treated as a special category of personal data, so how it is processed matters legally, not just technically.

A secure lock meets three conditions. First, it stores a template, not an image of the finger — this limits the impact of any leak. Second, it keeps it locally, in the device itself, not on the maker's server. Third, it protects that record in hardware.

Local verification and encryption

In practice this means the template is verified locally, kept in secured memory and never leaves the device. In the Perrugi ecosystem this role is played by perrugi:brain — an encrypted lock bus, and perrugi:brain encrypts the communication with the electric strike. As a result, even physical access to the electronics does not grant access to the data. Biometric templates are held in secured memory and verified locally; communication between the components of the system runs over an encrypted channel. In general, the less data leaves the device, the easier privacy is to protect.

Offline mode — why no internet is an advantage

A misconception has grown around smart locks: that "smart" means "cloud-dependent". It need not. In a lock with local biometric matching, the internet is not needed to open the door — it is needed at most for extra features such as push notifications or granting a guest remote access.

Working offline brings three real benefits. Reliability — an outage of your link or the maker's server does not leave you locked out. Privacy — since logs and templates do not go to the cloud, there is nothing to intercept. Longevity — the device does not "die" when the maker shuts down a network service years later. This approach is especially valued in Germany and Scandinavia, where privacy and a long product life are selling points.

Security doesn't shout. A good lock works quietly, locally and without asking for your data — yet still knows who is standing at the door.

How many fingerprints does the lock hold, and how do you grant access?

A practical lock lets you enroll many fingerprints — one or several per household member — and assign profiles and permissions to them. That matters in a family where everyone should enter with their own finger, and in short-term rentals where access must be granted and revoked quickly.

A well-designed system distinguishes permanent access (household) from temporary access (a contractor, a guest, a carer). A one-time code or an access with an expiry date solves a classic problem: you want to let someone in for a single day without handing over keys or changing the cylinder. After the deadline the permission disappears by itself.

Another feature is the access log — a record of who opened the door and when. In a privacy-first version the log is stored locally, not in the cloud, so you keep full control. In practice, managing access comes down to three operations: add a user, give them a method (fingerprint, PIN or card), and revoke the permission if needed — with no locksmith and no cutting new keys.

Fingerprint, PIN, NFC or app — which method to choose?

The best lock does not force one method. Different situations call for different ways to open: you come home with shopping in both hands — a PIN on the keypad or a card is easier; you let in a crew for one day — you grant a timed code in the app; you enter alone every day — the fingerprint is fastest.

perrugi:palm combines four methods in one device: biometrics, an eight-digit PIN, an NFC card and the app. So you always have a backup when a finger is wet, dirty or cut, and household members without a smartphone still get convenient access. This multi-method design is not a gimmick — it is what makes a lock practical around the clock and all year round.

What to look for when buying a fingerprint lock

Before comparing prices, compare the parameters that really shape daily use:

• Recognition accuracy — how rarely the reader fails to recognise an authorised finger and how rarely it admits a stranger.
• Backup methods — PIN, NFC and the app alongside biometrics.
• Operating conditions — an outdoor lock must endure rain, dust and frost. Look for a suitable IP rating and a wide temperature range (perrugi:palm works from -30 °C to +85 °C).
• Material and resistance — a soda-lime glass ≥6H front and anti-tamper sensors raise real security.
• Door type — check the lock fits your cylinder and profile (aluminium, PVC, timber). We cover this in a separate guide: smart lock for aluminium and PVC doors.
• Data privacy — ask where the template is kept and whether the device works offline.