# useTrustedDevices() > This hook requires a [development build](https://docs.expo.dev/develop/development-builds/introduction/) that includes a compatible version of `@clerk/expo` and doesn't work in Expo Go. The `useTrustedDevices()` hook provides methods to check biometric trusted-device availability, enroll the current app installation, list and revoke credentials, and sign in returning users. ## Returns The `useTrustedDevices()` hook returns the following methods: - [getAvailability()](https://clerk.com/docs/expo/reference/native-hooks/use-trusted-devices.md#get-availability) - [list()](https://clerk.com/docs/expo/reference/native-hooks/use-trusted-devices.md#list) - [enroll()](https://clerk.com/docs/expo/reference/native-hooks/use-trusted-devices.md#enroll) - [revoke()](https://clerk.com/docs/expo/reference/native-hooks/use-trusted-devices.md#revoke) - [signIn()](https://clerk.com/docs/expo/reference/native-hooks/use-trusted-devices.md#sign-in) ### `getAvailability()` Checks whether a trusted-device credential and private key are available locally for sign-in. Pass an `id` or `identifierHint` to check a specific credential. The function signature is: ```ts function getAvailability( params?: GetTrustedDeviceAvailabilityParams, ): Promise ``` #### Parameters `getAvailability()` accepts the following parameters (`GetTrustedDeviceAvailabilityParams`): | Name | Type | Description | | --------------- | ------ | ------------------------------------------------------------------------------------------------------------ | | id? | string | The ID of the trusted-device credential to check. When omitted, Clerk checks the available local credential. | | identifierHint? | string | A local-only user identifier hint used to select a matching credential. | #### Returns `getAvailability()` returns the following values: | Name | Type | Description | | ----------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------- | | isAvailable | boolean | Whether a local credential and private key are available for trusted-device sign-in. | | unavailableReason | 'environment\_unavailable' | 'native\_api\_disabled' | 'feature\_disabled' | 'unsupported\_platform' | 'biometric\_authentication\_unavailable' | 'no\_local\_credential' | 'local\_key\_missing' | 'server\_credential\_missing' | 'server\_credential\_revoked' | null | The reason trusted-device sign-in is unavailable. This value is null when sign-in is available. | ### `list()` Lists active trusted-device credentials for the signed-in user. Returns a `Promise` that resolves to an array of [TrustedDevice](https://clerk.com/docs/expo/reference/native-hooks/use-trusted-devices.md#trusted-device) objects. The function signature is: ```ts function list(): Promise ``` ### `enroll()` Enrolls the current app installation as a biometric trusted device. Enrollment requires a Clerk session with a status of `active` or `pending`. Returns a `Promise` that resolves to the enrolled [TrustedDevice](https://clerk.com/docs/expo/reference/native-hooks/use-trusted-devices.md#trusted-device) object. The function signature is: ```ts function enroll(params?: EnrollTrustedDeviceParams): Promise ``` #### Parameters `enroll()` accepts the following parameters (`EnrollTrustedDeviceParams`): | Name | Type | Description | | ---------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------- | | deviceName? | string | A human-readable name stored with the trusted-device credential. | | identifierHint? | string | A local-only user identifier hint stored with the credential for later selection. | | reason? | string | The reason displayed in the system authentication prompt. | | 'biometry\_current\_set': Requires a biometric from the currently enrolled set. Adding or removing biometric enrollment invalidates the private key. | 'biometry\_any': Requires biometric authentication and allows biometric enrollment changes. | | ### `revoke()` Revokes a trusted-device credential. If the credential belongs to the current app installation, Clerk also deletes its local private key. Returns a `Promise` that resolves to the revoked [TrustedDevice](https://clerk.com/docs/expo/reference/native-hooks/use-trusted-devices.md#trusted-device) object. The function signature is: ```ts function revoke(id: string): Promise ``` #### Parameters `revoke()` accepts the following parameter: | Name | Type | Description | | ---- | ------ | -------------------------------------------------- | | id | string | The ID of the trusted-device credential to revoke. | ### `signIn()` Signs in with a locally enrolled trusted-device credential. The function signature is: ```ts function signIn(params?: SignInWithTrustedDeviceParams): Promise ``` #### Parameters `signIn()` accepts the following parameters (`SignInWithTrustedDeviceParams`): | Name | Type | Description | | --------------- | ------ | -------------------------------------------------------------------------------------------------------- | | id? | string | The ID of the trusted-device credential to use. When omitted, Clerk uses the available local credential. | | identifierHint? | string | A local-only user identifier hint used to select a matching credential. | | reason? | string | The reason displayed in the system authentication prompt. | #### Returns `signIn()` returns the following values: | Name | Type | Description | | ---------------- | -------------- | ------------------------------------------------------------------------------------------------------------- | | status | SignInStatus | The status of the sign-in attempt. | | createdSessionId | string | null | The ID of the session created by a completed sign-in. Pass this value to setActive() to activate the session. | ## Types ### `TrustedDevice` | Name | Type | Description | | ------------- | --------------------- | --------------------------------------------------------- | | id | string | The ID of the trusted-device credential. | | object | 'trusted\_device' | The resource object name. | | platform | 'ios' | 'android' | The platform associated with the credential. | | appIdentifier | string | The native app identifier associated with the credential. | | name | string | null | The human-readable credential name. | | algorithm | 'ES256' | The credential's signature algorithm. | | status | 'active' | 'revoked' | The credential's status. | | createdAt | Date | The date when the credential was created. | | updatedAt | Date | The date when the credential was last updated. | | lastUsedAt | Date | null | The date when the credential was last used. | | revokedAt | Date | null | The date when the credential was revoked. | ## How to use the `useTrustedDevices()` hook To learn how to enroll a trusted device, sign in a returning user, and revoke a credential, see the [biometric sign-in guide](https://clerk.com/docs/guides/development/custom-flows/authentication/biometric-sign-in.md). --- ## Sitemap [Overview of all docs pages](https://clerk.com/docs/llms.txt)