3 ms·
Even if they snatch it unlocked they still can’t login because there’s an extra biometrics check required for WebAuthn
by drexlspivey 4y ago
Even if they snatch it unlocked they still can’t login because there’s an extra biometrics check required for WebAuthn
- SgtBastard 4y agoIn at least Apple's case, Device PIN is also a factor to unlock the secure enclave where the passkeys are kept - so, assuming there's no stronger enforcement that it must use FaceID/TouchID, shoulder surfing a PIN unlock of the device and then swiping it grants access to all accounts.