3 ms·
> The thief can also often loot the phone’s financial apps since the passcode can unlock access to all the device’s stored passwords. My multiple banking apps
by oefrha 4y ago
> The thief can also often loot the phone’s financial apps since the passcode can unlock access to all the device’s stored passwords.
My multiple banking apps all require me to authenticate again at least with FaceID every single time I use them, with very short timeouts. Which bank’s app can be looted with the phone passcode alone?
- Xylakant 4y agoIIRC, FaceTime can fall back to the device passcode in some circumstances.
- throwanem 4y agoIt falls back on the passcode any time it can't match a face within three or so tries.
- lotsofpulp 4y agoIt is for this reason that I do not have any financial website, email, or Keepass database passwords in iOS/macOS keychain. It is trivial to access all of someone’s passwords in keychain if you know their iOS passcode.
- fmajid 4y agoSo does Apple Pay.
- loriverkutya 4y agoThis is true for apple pay but not in the banking apps, if FaceID fails in the banking app it asks to reauthenticate yourself with your mobile bank app credentials.
- pancrufty 4y agoSame for my European bank. It’s annoying enough that I quit the app and reopen it to try FaceID again. I don’t even know my bank password
- Etheryte 4y agoEvery FaceID prompt can also be unlocked with the passcode, all you need to do is fail a few tries and then you can use the passcode as a fallback.
- oefrha 4y agoThat only applies to unlocking the phone. Failing a FaceID prompt in the banking app results in reentry of online banking password + 2FA.
- deleted 4y ago[deleted]