[API reference](https://evolu.dev/docs/api-reference) › [@evolu/common](https://evolu.dev/docs/api-reference/common) › [local‑first/LocalAuth](https://evolu.dev/docs/api-reference/common/local-first/LocalAuth) › LocalAuthOptions

Defined in: [packages/common/src/local-first/LocalAuth.ts:346](https://github.com/evoluhq/evolu/blob/e7144e2bbe9069362b62dec1b64a8aa922b8f1b0/packages/common/src/local-first/LocalAuth.ts#L346)

## Extended by

- [`LocalAuthOptionsValues`](https://evolu.dev/docs/api-reference/common/local-first/LocalAuth/interfaces/LocalAuthOptionsValues)
- [`SensitiveInfoGetRequest`](https://evolu.dev/docs/api-reference/common/local-first/LocalAuth/interfaces/SensitiveInfoGetRequest)

## Properties

<a id="accesscontrol"></a>

### accessControl?

```ts
readonly optional accessControl?: AccessControl;
```

Defined in: [packages/common/src/local-first/LocalAuth.ts:364](https://github.com/evoluhq/evolu/blob/e7144e2bbe9069362b62dec1b64a8aa922b8f1b0/packages/common/src/local-first/LocalAuth.ts#L364)

Native: Desired access-control policy. The native implementation will
automatically fall back to the strongest supported policy for the current
device (Secure Enclave ➝ Biometry ➝ Device Credential ➝ None).

---

<a id="androidbiometricsstrongonly"></a>

### androidBiometricsStrongOnly?

```ts
readonly optional androidBiometricsStrongOnly?: boolean;
```

Defined in: [packages/common/src/local-first/LocalAuth.ts:370](https://github.com/evoluhq/evolu/blob/e7144e2bbe9069362b62dec1b64a8aa922b8f1b0/packages/common/src/local-first/LocalAuth.ts#L370)

Android: Fine tune whether the hardware-authenticated key should require
biometrics only.

---

<a id="authenticationprompt"></a>

### authenticationPrompt?

```ts
readonly optional authenticationPrompt?: AuthenticationPrompt;
```

Defined in: [packages/common/src/local-first/LocalAuth.ts:376](https://github.com/evoluhq/evolu/blob/e7144e2bbe9069362b62dec1b64a8aa922b8f1b0/packages/common/src/local-first/LocalAuth.ts#L376)

Native: Optional prompt configuration that will be shown when protected
keys require user presence.

---

<a id="iossynchronizable"></a>

### iosSynchronizable?

```ts
readonly optional iosSynchronizable?: boolean;
```

Defined in: [packages/common/src/local-first/LocalAuth.ts:354](https://github.com/evoluhq/evolu/blob/e7144e2bbe9069362b62dec1b64a8aa922b8f1b0/packages/common/src/local-first/LocalAuth.ts#L354)

IOS: Enable keychain item synchronization via iCloud.

---

<a id="keychaingroup"></a>

### keychainGroup?

```ts
readonly optional keychainGroup?: string;
```

Defined in: [packages/common/src/local-first/LocalAuth.ts:357](https://github.com/evoluhq/evolu/blob/e7144e2bbe9069362b62dec1b64a8aa922b8f1b0/packages/common/src/local-first/LocalAuth.ts#L357)

IOS: Custom keychain access group.

---

<a id="relyingpartyid"></a>

### relyingPartyID?

```ts
readonly optional relyingPartyID?: string;
```

Defined in: [packages/common/src/local-first/LocalAuth.ts:379](https://github.com/evoluhq/evolu/blob/e7144e2bbe9069362b62dec1b64a8aa922b8f1b0/packages/common/src/local-first/LocalAuth.ts#L379)

Web: The relying party ID for WebAuthn. Defaults to the current hostname.

---

<a id="relyingpartyname"></a>

### relyingPartyName?

```ts
readonly optional relyingPartyName?: string;
```

Defined in: [packages/common/src/local-first/LocalAuth.ts:382](https://github.com/evoluhq/evolu/blob/e7144e2bbe9069362b62dec1b64a8aa922b8f1b0/packages/common/src/local-first/LocalAuth.ts#L382)

Web: The relying party name for WebAuthn. Defaults to 'Evolu'.

---

<a id="service"></a>

### service?

```ts
readonly optional service?: string;
```

Defined in: [packages/common/src/local-first/LocalAuth.ts:351](https://github.com/evoluhq/evolu/blob/e7144e2bbe9069362b62dec1b64a8aa922b8f1b0/packages/common/src/local-first/LocalAuth.ts#L351)

Native: Namespaces the stored entry. Defaults to the bundle identifier
(when available) or `default`.

---

<a id="webauthnauthenticatorattachment"></a>

### webAuthnAuthenticatorAttachment?

```ts
readonly optional webAuthnAuthenticatorAttachment?: AuthenticatorAttachment;
```

Defined in: [packages/common/src/local-first/LocalAuth.ts:394](https://github.com/evoluhq/evolu/blob/e7144e2bbe9069362b62dec1b64a8aa922b8f1b0/packages/common/src/local-first/LocalAuth.ts#L394)

Web: The authenticator attachment for WebAuthn. Defaults to 'platform'.

---

<a id="webauthnusername"></a>

### webAuthnUsername?

```ts
readonly optional webAuthnUsername?: string;
```

Defined in: [packages/common/src/local-first/LocalAuth.ts:385](https://github.com/evoluhq/evolu/blob/e7144e2bbe9069362b62dec1b64a8aa922b8f1b0/packages/common/src/local-first/LocalAuth.ts#L385)

Web: The username for WebAuthn. Defaults to 'Evolu User'.

---

<a id="webauthnuserverification"></a>

### webAuthnUserVerification?

```ts
readonly optional webAuthnUserVerification?: UserVerificationRequirement;
```

Defined in: [packages/common/src/local-first/LocalAuth.ts:391](https://github.com/evoluhq/evolu/blob/e7144e2bbe9069362b62dec1b64a8aa922b8f1b0/packages/common/src/local-first/LocalAuth.ts#L391)

Web: The user verification requirement for WebAuthn. Defaults to
'required'.