5 ms·
I once had auto reset enabled on my phone after 10 attempts, and then somehow while it was in my gym bag it proceeded to accidentally get buttons pressed and re
by TwoBit 5y ago
I once had auto reset enabled on my phone after 10 attempts, and then somehow while it was in my gym bag it proceeded to accidentally get buttons pressed and reset itself. Better to set that number to 1000 instead of 10.
- gjsman-1000 5y agoNowadays the time between guesses increases exponentially. So by the time you are close to a reset, you need to wait a few hours or days before the next and final guess.
- gruez 5y agoHow's that even possible? AFAIK after the first few attempts there's an exponentially increasing lockout time between passcode attempts, so the random button pressings would have to persist for a long time for it to reach 10 attempts.
- draw_down 5y agoMurphy’s law, basic stuff here.
- tinus_hn 5y agoIt wasn’t always like that, it used to be just 10 attempts you could do in a minute.
- ThePowerOfFuet 5y agoThe exponential backoff existed in iOS 5, IIRC.
- pueblito 5y agoOr someone tried to access your phone while you were away
- smoldesu 5y agoMy mom had the same thing happen, suffice to say that she doesn't trust her iPod anymore.
- easton 5y agoI set mine to four attempts, figuring that if I screw my passcode up four times it takes me like an hour to restore the device state from backup/MDM but if someone thought they had guesses at my passcode they'd lose that much quicker. Everything I can't "live without" that I use my phone for day to day is in GSuite/Spotify/iCloud/1Password anyway. (I now really pay attention when typing my passcode, which doesn't happen often because of Touch ID)
- jimmydorry 5y agoYou don't use phone TOTP? Google Authenticator, etc.
- T3OU-736 5y agoThose, too, can be backed up, though for a while, at least on Android, Google Authenticator could not be (unless rooted, and even then, a nontrivial undertaking). This, AFAIK, has changed.
- astrange 5y agoOn iOS it could not be backed up or transferred to another device. I think it can now, but I moved to another app forever ago because of that.
- easton 5y agoI use Authy and 1Password for that.
- 1cvmask 5y agoYou can also use saas pass as either or both as an authenticator and password manager. Worked on the passwordless 2FA part of it