Can do either - hands-free, or require a second factor like screen unlock and manual tap. If your phone is stolen, the first thing you'd want to do is revoke yo

Can do either - hands-free, or require a second factor like screen unlock and manual tap. If your phone is stolen, the first thing you'd want to do is revoke your account authorization (via web or another device), just as you would to protect your email accounts and anything else sensitive. If you are more paranoid, remote wipe - many companies have that as a policy already. We don't store credentials on the phone, and the tokens we issue for each interaction are short-lived.