2 ms·
Devices get snatched out of hands all the time.
by DangitBobby 4y ago
Devices get snatched out of hands all the time.
- drexlspivey 4y agoEven if they snatch it unlocked they still can’t login because there’s an extra biometrics check required for WebAuthn
- SgtBastard 4y agoIn at least Apple's case, Device PIN is also a factor to unlock the secure enclave where the passkeys are kept - so, assuming there's no stronger enforcement that it must use FaceID/TouchID, shoulder surfing a PIN unlock of the device and then swiping it grants access to all accounts.