4 ms·

Specifically, getting more people to have better security on their devices is a very difficult User Experience problem, and Apple's pretty good at solving these

Specifically, getting more people to have better security on their devices is a very difficult User Experience problem, and Apple's pretty good at solving these kinds of problems. TouchID moved the ball forward quite a bit, and FaceID will probably go even further. Obviously neither provide ultimate security, but Apple is in a strategic advantage since they make the hardware and software to make the barn walls and roof super secure, but it does nothing if the front door is left open.

mikeash 9y ago
Before TouchID, I set my passcode to 0000 with a four-hour window where I didn't have to reenter it. I only had one set at all because Find My Friends refused to keep me logged in unless I had a passcode set. With TouchID, I have a complex passcode that I have to enter a couple times a week. It's less secure than some hypothetical setup where I have a complex passcode I have to enter every time I unlock the phone, but it's far more secure than what I was actually doing before.
- phire 9y ago
  My android phone forces me to re-enter my passcode every 24 hours. I think that strikes a nice security median. If someone does get procession of my phone, I only need to stall for less than 24 hours. The rest of the time, the fingerprint scanner works near perfectly. It's actually faster to use the fingerprint scanner than the standard slide to unlock, which is all I ever had setup on my previous phones.
  - dpkonofa 9y ago
    iOS does the same after 48 hours of not being unlocked or re-authorized. I agree that this seems like a decent security compromise. Anyone with physical access to your phone for more than 48 hours has other vectors to pursue that are far easier than just trying to guess your password.
  - ruytlm 9y ago
    Is this a standard setting that can be managed?
late2part 9y ago
Here's a dumb question I haven not easily found the answer to. Can I configure my iphone to require TouchID, FaceID, and a PIN for each unlock of my phone every time?

mikeash 9y ago

Before TouchID, I set my passcode to 0000 with a four-hour window where I didn't have to reenter it. I only had one set at all because Find My Friends refused to keep me logged in unless I had a passcode set. With TouchID, I have a complex passcode that I have to enter a couple times a week. It's less secure than some hypothetical setup where I have a complex passcode I have to enter every time I unlock the phone, but it's far more secure than what I was actually doing before.

phire 9y ago
My android phone forces me to re-enter my passcode every 24 hours. I think that strikes a nice security median. If someone does get procession of my phone, I only need to stall for less than 24 hours. The rest of the time, the fingerprint scanner works near perfectly. It's actually faster to use the fingerprint scanner than the standard slide to unlock, which is all I ever had setup on my previous phones.
- dpkonofa 9y ago
  iOS does the same after 48 hours of not being unlocked or re-authorized. I agree that this seems like a decent security compromise. Anyone with physical access to your phone for more than 48 hours has other vectors to pursue that are far easier than just trying to guess your password.
- ruytlm 9y ago
  Is this a standard setting that can be managed?

late2part 9y ago

Here's a dumb question I haven not easily found the answer to. Can I configure my iphone to require TouchID, FaceID, and a PIN for each unlock of my phone every time?