3 ms·
Short aside about session lengths: If you are an app like Chase or Discover, and you intend to kill my app's biometric auth session after say 90 days, please t
by unethical_ban 3y ago
Short aside about session lengths:
If you are an app like Chase or Discover, and you intend to kill my app's biometric auth session after say 90 days, please tell me that when I first login manually and at least 7 days before said session will end.
I keep my passwords in local password safes, and I manually sync a copy to my phone.
It should not be expected by the user to have access to their passwords every day, if they have apps which say "Oh yeah, fingerprints! We trust you!".
If I were in the middle of a trip and got logged out of my mobile app without my password safe, I would be screwed, and it would not be my fault, given how opaque the session policy is on these apps.