Occasionally I leave my phone laying around or let other people play with it, but it's getting very tedious having to lock it all the time. Anyone up for creating a app that will let me lock certain portions/apps on the phone (ie. SMS, gallery, etc.) using the built in finger print scanner?
I will second this. I recall reading that Moto was going to release the APIs for the print scanner. That should make it considerably easier.
just a bump, I know all you great minds out there are capable of this and want this too =)
+1
+1 yes, yes, yes a needed app
Yes, yes, YES! I've been thinking about requesting something like this for a while now!
I emailed the developer of Widget Locker since he seems to be fiddling with the Finger Print Scanner on the Atrix to see if he's interested in making a separate app for this. I wouldn't mind paying something like $1 for it.
How can we get this thread more attention from developers on XDA?
Keep the thread bumped, add some other keywords such a biometric scanner, fingerprints, fingerprint scanner, etc. (I myself didn't find this when searching), post the same on other forums, that's all you can do really!
PiTT said:
I emailed the developer of Widget Locker since he seems to be fiddling with the Finger Print Scanner on the Atrix to see if he's interested in making a separate app for this.
Click to expand...
Click to collapse
And here I am! (Sorry for taking some time to get back to this)
What I'm doing from WidgetLocker is piggy backing on the system security, so I don't interface with the fingerprint scanner directly. However I have looked into this as it could be interesting for WidgetLocker to be able to use in more ways, and potentially another separate app like discussed here.
I've seen the other thread about the password keeper and this one about an app-lock type thing. The issue with a password keeper is that the passwords should be stored encrypted, otherwise if someone stole your phone they'd just need to root if (if it's not already) and they'd be able to get all your password. But encrypting the passwords with a key that's stored somewhere is really just adding a few extra steps, they're not truly protected. Normally they'd be encrypted with your password, and only decryptable with you typing the password again. But I don't think this could be done for the fingerprint scanner due to what information is available (And how the fingerprint information is stored on disk). I could be wrong however.
As for the app-locker thing, there are also security issues here, but I think app-lockers are more used as a deterrent than as real security. To lock out your friend rather than a thief. But there's a fair amount of non-fingerprint related work to be done for this kind of app as well.
If I do end up doing anything with it I'll post back.
I said this in the development section when it was released lol. So....+1 and good idea!
Atrix4G Rooted!
[email protected] said:
And here I am! (Sorry for taking some time to get back to this)
What I'm doing from WidgetLocker is piggy backing on the system security, so I don't interface with the fingerprint scanner directly. However I have looked into this as it could be interesting for WidgetLocker to be able to use in more ways, and potentially another separate app like discussed here.
I've seen the other thread about the password keeper and this one about an app-lock type thing. The issue with a password keeper is that the passwords should be stored encrypted, otherwise if someone stole your phone they'd just need to root if (if it's not already) and they'd be able to get all your password. But encrypting the passwords with a key that's stored somewhere is really just adding a few extra steps, they're not truly protected. Normally they'd be encrypted with your password, and only decryptable with you typing the password again. But I don't think this could be done for the fingerprint scanner due to what information is available (And how the fingerprint information is stored on disk). I could be wrong however.
As for the app-locker thing, there are also security issues here, but I think app-lockers are more used as a deterrent than as real security. To lock out your friend rather than a thief. But there's a fair amount of non-fingerprint related work to be done for this kind of app as well.
If I do end up doing anything with it I'll post back.
Click to expand...
Click to collapse
my reasoning behind this type of app as you said isn't for REAL security from a thief, more of a deterrent from people around me....such as a nosy friend or girlfriend =)
"such as a nosy"
Well, of course cell phones have had a way to prevent that for what, 20+ years now? You leave it locked, except for "emergency and speed dial" or other restricted calling. No reason that someone has to borrow my cell phone (and deprive me of my phone!) while they're doing whatever with it.
I don't have any guilt about saying "Sure, you can make a call. But I need my phone with me."
PiTT said:
my reasoning behind this type of app as you said isn't for REAL security from a thief, more of a deterrent from people around me....such as a nosy friend or girlfriend =)
Click to expand...
Click to collapse
Well, if you have a friend that would invade your privacy then they are not your friend. And if you have a girlfriend that doesn't trust you enough to respect your privacy then dump her. You can't have a relationship without trust.
There are already apps that let you lock particular applications. I hand my phone over to my 4-year-old all the time so she can play Fruit Ninja, so I keep my work email locked down. I guess it would be kind of cool if the app locking software took advantage of the Atrix's fingerprint scanner.
live4nyy said:
Well, if you have a friend that would invade your privacy then they are not your friend. And if you have a girlfriend that doesn't trust you enough to respect your privacy then dump her. You can't have a relationship without trust.
Click to expand...
Click to collapse
lol, I second this... She's obviously insecure.
And why are we assuming that it's the girlfriend that's untrustworthy? PiTT (no offense, all due respect) is the one with dirty little secrets on his phone.
aquariumdrinker said:
And why are we assuming that it's the girlfriend that's untrustworthy? PiTT (no offense, all due respect) is the one with dirty little secrets on his phone.
Click to expand...
Click to collapse
Thanks =)
you guys are missing the point, it was just an example. Now back to the topic at hand.
I would love to be able to lock my phone using the finger print swype. This can't be to hard, could it?
jange said:
I would love to be able to lock my phone using the finger print swype. This can't be to hard, could it?
Click to expand...
Click to collapse
I don't understand what you are asking here. If you're going to be swiping your finger over the sensor to lock it, wouldn't it be just as simple to just press the button? If you have the sensor lock enabled, it will be locked with access only being granted to your finger swipe.
GEESH!
Clearly some people on this thread don't understand what's going on here. So let me break it down....
It's not about "it's not a real friend if they invade your privacy".
It's not about "why not just lock the phone itself".
Maybe you have a family member, girlfriend, wife, or CHILD you want to be allowed to use your phone. This requires unlocking the phone itself.
Buuuut, you don't want them snooping in your email or for the dense folks who don't get it, you don't want a CHILD deleting your messages accidentally, replying inadvertently to a co-worker via email etc.
Or let's be real, you don't want your GF or wife to see the chic you've been bangin's nude photo in your phone.
So you want to FINGERPRINT LOCK specific apps, like TEXT, EMAIL, SKYPE, TANGO, FRING, ETC! That way your "guest" can use your phone, but can't use any other apps without your finger!
GEESH!
I'd really like to see phones with Windows-like login profiles. So I can have my profile, ADMIN, and my wife can have hers GUEST.
Anyway...I second/triple/quadruple the idea of a fingerprint reader app lock. Right now I use AppProtector, and I'm looking into a new app called simply LOCK or (App) Lock.
"Clearly some people on this thread don't understand what's going on here. So let me break it down....
........you don't want your GF or wife to see the chic you've been bangin's nude photo in your phone."
*grin* The premise of your post made me laugh hard.
On a real note, I think this kind of application would be awesome. I too use appprotector, and I used to use the fingerprint scanner, but it just became bothersome to use everytime I locked my phone and had to unlock it. I don't have anything to hide on my phone, but I do lock my "SU" folder that contains all of my root tools. I have a 12 yo at home, and she could very easily mess something up without knowing it. I think the idea of locking certains apps with the fingerprint scanner is a fantastic idea, and I'd be willing to pay a few bucks for it for sure.
Actually, a whole utility for the fingerprint scanner on the Atrix that allowed you to do multiple things with it would be great.
Like was posted previously, it would be nice to have guest accounts (for wife and child etc), and with a fingerprint swipe, they wouldn't even have to login..swipe and go.
Related
I'm looking for recommendations on phone security apps in case my phone gets lost or stolen. Free or paid, I really don't care, I just want to sleep better knowing that if my clumsy self loses the phone I won't be out of 200 dollars. Thanks!
Lookout has been good for me. Does backups, anti-virus (however unnecessary as it may be right now), and phone location. Used it since beta Win Mo days.
-bZj
_____
-sent from my Samsung Vibrant via XDApp
down8 said:
Lookout has been good for me. Does backups, anti-virus (however unnecessary as it may be right now), and phone location. Used it since beta Win Mo days.
-bZj
_____
-sent from my Samsung Vibrant via XDApp
Click to expand...
Click to collapse
Thanks for the help! I tried the app and it works out well. Everything works well on it. I had to do the GPS fix on my phone to test out the Locate Device function, and good thing I did too! I would've been so mad if I used lookout and then realize the GPS on my phone didn't work, lol. Again, thanks!
I'm a fan of Mobile Defense. You can install as a system app and it will be able to survive a wipe. The only way to remove it would be a flash. It won't show up in app manager either. It can remotely activate the GPS and will notify you automatically of a sim card change via email. It can also remotely lock the phone even if you don't normally use a lock pattern. It can also display messages on the screen that won't go away without entering a code. So you can have the screen have a message telling the person to return the phone and the message won't go away until the code is entered.
The only downside is that I think the beta program is closed to new people right now. I'm not sure as I joined a while ago.
I demoed Wave Secure and liked it so much that I bought the subscription for my G1 and my Mom's My Touch.
Check the features here.
https://www.wavesecure.com/wavesecure/android.aspx
Good Luck!
And I became really a fan of the recently introduced Track and Protect. It's a service that not only allows you to locate your phone on map, lock it, wipe it or let it scream via a personal web panel but also allows you to make photos remotely and send a call back command to listen to your own phone. All this works even after SIM change! It has auto lock function, it reports you the thief's phone number, operator ID and location instantly. Really useful.
MobiJohn said:
And I became really a fan of the recently introduced Track and Protect. It's a service that not only allows you to locate your phone on map, lock it, wipe it or let it scream via a personal web panel but also allows you to make photos remotely and send a call back command to listen to your own phone. All this works even after SIM change! It has auto lock function, it reports you the thief's phone number, operator ID and location instantly. Really useful.
Click to expand...
Click to collapse
Do you know any information on there "credit" method that they are using? It seems like a great service to use except that they don't tell you anything about these "credits" on the website without registering first.
Currently I use both Mobile Defense and Lookout. I always feel safe when I have more than one security app just in case. Although, Mobile Defense might also have a paid service in the future, similar to what Trust and Protect is doing. I wouldn't mind paying Mobile Defense since they allow us to install it as a system app, which a previous user explained upon.
A lot of people always question why I don't have any security measures in place after swiping my screen. I personally just don't see the benefit of typing in a password every single time I unlock, versus the risk of actually losing my phone.
I also feel that if the worst did happen, I could change my Gmail and Facebook passwords and that would basically cover all bases. In fact, all I'd have to do is revoke two-step authorization for Gmail and that would basically do it too. I don't have any financial information stored to the phone if I think about it (with exception of maybe Fandango).
One time, I found an non-password protected iPhone in a cab. There was no password lock on the phone, and we were able to return the phone to the owner by finding the last person he called. He happened to be with the person who picked up.
How do most people here feel about it?
It's really up to you. If you're comfortable with no password, just have a plan in case you lose it. Which, it sounds like you do. Also think about backing up things like pictures from time to time.
I use the face recognition feature. Works pretty well once you train it. And I have my name on the swipe screen before that, so maybe I'll get it back if someone I know finds it.
And, while I haven't tried it on this phone yet, Seekdroid is another option. Lets you remotely lock and wipe the phone from any web browser.
Sent from my SCH-I535 using Tapatalk
dunderball said:
A lot of people always question why I don't have any security measures in place after swiping my screen. I personally just don't see the benefit of typing in a password every single time I unlock, versus the risk of actually losing my phone.
I also feel that if the worst did happen, I could change my Gmail and Facebook passwords and that would basically cover all bases. In fact, all I'd have to do is revoke two-step authorization for Gmail and that would basically do it too. I don't have any financial information stored to the phone if I think about it (with exception of maybe Fandango).
One time, I found an non-password protected iPhone in a cab. There was no password lock on the phone, and we were able to return the phone to the owner by finding the last person he called. He happened to be with the person who picked up.
How do most people here feel about it?
Click to expand...
Click to collapse
I prefer at-least a simple password. Also, under Security -> Owner information - I have a message for any potential finders of my phone: "If this phone is lost please email ma at [email protected]". That message scrolls across the screen even when locked.
I've searched the board here and found a few threads about bypassing the security policy when corporate email requires a pin/password code unlock on your phone preventing you from customizing your lock screen. All of the threads I saw where made under forums for other devices and I'm curious if anyone may know if they will work for the Verizon Note II?
I have a corp email account I sync on my phone and it forces me to use a pin lock or password phrase for security. I would like to try and get around this limitation, does anyone have any suggestions?
I'm trying to figure out the same thing.
I couldnt find anything in the play store that would do it.
Sent from my SCH-I605 using Tapatalk 2
Enhanced email has the option
sent from my "Oh my God its huge" galaxy note 2
smalltownbird said:
Enhanced email has the option
sent from my "Oh my God its huge" galaxy note 2
Click to expand...
Click to collapse
I see it for $9.99 on the GooglePlay Store ... a little steep for a single option / enhancement.
Durzo.Blint said:
I've searched the board here and found a few threads about bypassing the security policy when corporate email requires a pin/password code unlock on your phone preventing you from customizing your lock screen. All of the threads I saw where made under forums for other devices and I'm curious if anyone may know if they will work for the Verizon Note II?
I have a corp email account I sync on my phone and it forces me to use a pin lock or password phrase for security. I would like to try and get around this limitation, does anyone have any suggestions?
Click to expand...
Click to collapse
As the office IT guy. We make you set that stuff for a reason! Be careful as this could be a violation of your corporate use policy.
Make sure and ask your IT department before circumventing this policy.
However I belive touchdown leta you leave this password on just the exchange data on your phone.
omnifox said:
As the office IT guy. We make you set that stuff for a reason! Be careful as this could be a violation of your corporate use policy.
Make sure and ask your IT department before circumventing this policy.
However I belive touchdown leta you leave this password on just the exchange data on your phone.
Click to expand...
Click to collapse
thanks for the help, but not only is Touchdown $19.99, according to their website the software will not bypass pin/password security.
Touchdown doesn't circumvent the policy but you only need to enter the pin when accessing anything synced to your device via the exchange service. Everything else is wide open. Personally, I prefer to have all my information locked down via a pin. Too much information accessible on these devices anymore and the minor inconvenience of entering a pin is a small price to pay IMHO
Durzo.Blint said:
I've searched the board here and found a few threads about bypassing the security policy when corporate email requires a pin/password code unlock on your phone preventing you from customizing your lock screen. All of the threads I saw where made under forums for other devices and I'm curious if anyone may know if they will work for the Verizon Note II?
I have a corp email account I sync on my phone and it forces me to use a pin lock or password phrase for security. I would like to try and get around this limitation, does anyone have any suggestions?
Click to expand...
Click to collapse
my corporate exchange admin said that i simply needed to use the pattern unlock screen function and that would be sufficient. i'm sure its a configuration option he did on the exchange server.
Durzo.Blint said:
I've searched the board here and found a few threads about bypassing the security policy when corporate email requires a pin/password code unlock on your phone preventing you from customizing your lock screen. All of the threads I saw where made under forums for other devices and I'm curious if anyone may know if they will work for the Verizon Note II?
I have a corp email account I sync on my phone and it forces me to use a pin lock or password phrase for security. I would like to try and get around this limitation, does anyone have any suggestions?
Click to expand...
Click to collapse
I rooted my Note 2 with "imnuts" deodexed version of the root method located here,
http://forum.xda-developers.com/showthread.php?t=2035404
Then I was able to follow these directions located here,
http://forum.xda-developers.com/showthread.php?t=1117452
This worked for what you are trying to do. Follow the directions and be sure and download the Java files that are pointed out and it will work just fine. It's real easy to do but make sure you FOLLOW the directions. I have used this method on my GS3 and it worked for it also.
Jetdr said:
I rooted my Note 2 with "imnuts" deodexed version of the root method located here,
http://forum.xda-developers.com/showthread.php?t=2035404
Then I was able to follow these directions located here,
http://forum.xda-developers.com/showthread.php?t=1117452
This worked for what you are trying to do. Follow the directions and be sure and download the Java files that are pointed out and it will work just fine. It's real easy to do but make sure you FOLLOW the directions. I have used this method on my GS3 and it worked for it also.
Click to expand...
Click to collapse
Thanks a million for this!! I will try this and report back my results. :good:
Or just use maildroid. Its free in the play store
Sent from my SCH-I605 using xda premium
As much as I would like to, I KNOW that my IT department would kick my @$$ if I did this. If your phone was lost/stolen, your exposing yourself to some serious issues if there is any sensitive info on your phone.
I just wish they would allow the pattern lock and not force the PIN method at my company.
I'm trying to setup a home VPN and I'm having the same issue. It's requiring I setup a security lock for my phone just to enter any VPN information.
Kind of frustrating because it's not a corporate network I'm connecting to, just my own personal home network. And there's no way for me to do it without some type of security lock. Very lame sauce.
DaRkL3AD3R said:
I'm trying to setup a home VPN and I'm having the same issue. It's requiring I setup a security lock for my phone just to enter any VPN information.
Kind of frustrating because it's not a corporate network I'm connecting to, just my own personal home network. And there's no way for me to do it without some type of security lock. Very lame sauce.
Click to expand...
Click to collapse
Yeah I agree here, really wish there was a way to disable that feature. I understand that they want to make the device secure when using passwords, but it should be our choice when using that security. The VPN security is annoying as hell for me. I end up removing the vpn when I'm done.
Being the "IT Guy" at my job, once corporate data touches a person's phone it becomes a liability. No matter how you look at it. YES the phone belongs to you but the Email belongs to the company.
We enforce the Pin on our Exchange Servers here and require any employee to sign a contract pretty much stating that they're going to comply with the rules and regulations.
Is it inconvenient for the user, "He'll yeah it is", you know how often I get cussed out? But the fact of the matter is that the company has to protect itself.
Before we put this policy in place, we had an employee that had an iPad he had email and other proprietary materials on it. No Pin and it was a 3G model. He reported the iPad missing 5 days later only because he was wondering why his emails in outlook would go from unread to read with out him doing anything. After investigating it came out about the iPad and we had to remotely wiped it.
Long story short a company can't take chances with its information so if it means inconveniencing it's employees a little to give them the convenience (oxymoron) of using a mobile device for accessing data....then so be it.
Sent from my SCH-I605 using Tapatalk 2
Is this exchange email security policy a verizon specific requirement? I just switched from sprint and never had to agree to any permissions that alowed my phone to factory reset without my input before. I was on HTC before but now samsung. Ditto a coworker who is now on motorola and gets the same excessive permissions to setup work email. So many limitations and restrictions since the switch that I would think about going back to Sprint
Sent from my SCH-I605 using xda premium
Please read forum rules before posting
Questions go in Q&A
Thread moved
Thank you for your cooperation
Friendly Neighborhood Moderator
Hi everyone, I'm a potential Mate20 Pro customer, but I need more information on the features:
1. Is it possible to temporarily disable the face unlock, similar to the iPhone X?
Here is how Apple implements mechanism to disable it: https://mic.com/articles/191653/heres-how-iphone-users-can-disable-face-id#.GFGUiwnJH
2. Is it possible to geolock Face Unlock, so it works in your own home, but is disabled in other places?
Thank you.
Anyone?
Not understanding why you'd do that. Probably just set screen lock delay in settings. I never had geolock
leo72793 said:
Not understanding why you'd do that. Probably just set screen lock delay in settings. I never had geolock
Click to expand...
Click to collapse
The reason is in the article I linked above: To protect yourself against anyone (such as a bad police officer) who might try to hold your phone up to your face to unlock without permission. Apple has a solution.
As for geolocks, some phones can already disable or downgrade their security when you are in a trusted zone. (My mom's old LG G4 from 2015 does this.) It would be nice to only allow face unlock in my own home or office.
oops double post
Bamboo-Toolkit said:
The reason is in the article I linked above: To protect yourself against anyone (such as a bad police officer) who might try to hold your phone up to your face to unlock without permission. Apple has a solution.
As for geolocks, some phones can already disable or downgrade their security when you are in a trusted zone. (My mom's old LG G4 from 2015 does this.) It would be nice to only allow face unlock in my own home or office.
Click to expand...
Click to collapse
well for the "geolock" id expect it to need location and or wifi access. which if off wont allow it to work. 2nd, what are you tryingh to hide from cops lol
Dunno about geo locking (that might need a 3rd party app) but there is an option to require the eyes to be open.
Might be useful for those people living in such Police states that may infringe on your civil and constitutional rights as you simply need to keep your eyes shut
Unless that is the LEO is carrying matchsticks
---------- Post added at 07:06 AM ---------- Previous post was at 06:09 AM ----------
Actually now that I've woken up, if someone is that paranoid they're worried about a LEO holding the phone to the face to unlock then maybe they should just disable face and fingerprint unlock all together and only use a PIN with a very short screen off time
With smart unlock you can tell the phone to unlock without code or anything at certain places (ie at Home). Outside of that place you would need your PIN or password (if you chose one of these options). At home you would have no security for unlocking but I think it's the closest thing to what you want (if you want to beef up your security for certain apps you can chose a pin or face unlock for every single app so nobody could use them even if they got hold of your phone at home).
Hope that helps
leo72793 said:
well for the "geolock" id expect it to need location and or wifi access. which if off wont allow it to work. 2nd, what are you tryingh to hide from cops lol
Click to expand...
Click to collapse
I'm just security-conscious.
Just because you're paranoid doesn't mean anyone is actually chasing you! :silly:
panman1964 said:
Might be useful for those people living in such Police states that may infringe on your civil and constitutional rights as you simply need to keep your eyes shut
[/COLOR]Actually now that I've woken up, if someone is that paranoid they're worried about a LEO holding the phone to the face to unlock then maybe they should just disable face and fingerprint unlock all together and only use a PIN with a very short screen off time
Click to expand...
Click to collapse
In China, the police can just arrest anyone and hold them forever until they give up their phone PW. That's police states for you!
Here in the Western world, PIN unlocks often have different legal protections than biometric unlocks, hence Apple's solution. But you do have a point about disabling Face / Fingerprint unlock.
AndiThebassman said:
With smart unlock you can tell the phone to unlock without code or anything at certain places (ie at Home). Outside of that place you would need your PIN or password (if you chose one of these options). At home you would have no security for unlocking but I think it's the closest thing to what you want (if you want to beef up your security for certain apps you can chose a pin or face unlock for every single app so nobody could use them even if they got hold of your phone at home).
Hope that helps
Click to expand...
Click to collapse
Thanks, this is helpful.
For Huawei go to secure lock settings and enable "Show lockdown button on power off screen", when you try to power off your phone there will be an extra option called lockdown when you select this your phone can only be unclocked by PIN (if you've set it)
Bamboo-Toolkit said:
I'm just security-conscious.
Just because you're paranoid doesn't mean anyone is actually chasing you! :silly:
In China, the police can just arrest anyone and hold them forever until they give up their phone PW. That's police states for you!
Here in the Western world, PIN unlocks often have different legal protections than biometric unlocks, hence Apple's solution. But you do have a point about disabling Face / Fingerprint unlock.
Thanks, this is helpful.
Click to expand...
Click to collapse
huawei offer privacy area in secuirty&privacy. use 2nd passoword enter privacy mode. told them your main password and hide your 2nd password. DO NOT BELIEVE IN MOVIES, YOU UNABLE TO RESIST TORTURE. this is right to protect yourself and your date. but in privacy mode use phone sim card 2. you keep sim card out.
Samsung pass doesn't work. What do you guys use I just came from iphone and it has a password manager built in. What free ones are available
1password. Works everywhere and on everything.
Bitwarden has a free account offering and their premium is very cheap.
Bitwarden is free, open source and the premium is literally $10 per year if you wanted it but it's not needed, everything is available for free except the encrypted cloud storage.
I use Bitwarden's $10 a year tier so I can use my YubiKeys with it.
I don't. Google password manager is free and works flawlessly. Anything else is a waste of time.
Brava27 said:
I don't. Google password manager is free and works flawlessly. Anything else is a waste of time.
Click to expand...
Click to collapse
How do you get Google pass to be the default over Samsung pass?
GastonC said:
How do you get Google pass to be the default over Samsung pass?
Click to expand...
Click to collapse
Under passwords and autofill in settings. Then select autofill service.
Bitwarden $10 annual plan. Avoid using LastPass as they have had several security breaches recently.
Brava27 said:
I don't. Google password manager is free and works flawlessly. Anything else is a waste of time.
Click to expand...
Click to collapse
Not true and several reasons why some others are better and why I don't and wouldn't use Google password manager atm. YMMV
evangelionpunk said:
Not true and several reasons why some others are better and why I don't and wouldn't use Google password manager atm. YMMV
Click to expand...
Click to collapse
Your choice. Google has never failed me.
Brava27 said:
I don't. Google password manager is free and works flawlessly. Anything else is a waste of time.
Click to expand...
Click to collapse
Good luck if your Google account ever gets breached. Or if Google one day bans your account like they've been known to do to others for seemingly no reason. I used Google's password manager for years but when this flaw was pointed out to me, I switched to Bitwarden that same day and I haven't looked back.
It's also very easy to breach your Google account and thus all your others if your phone is stolen.
Like iPhone, a stolen Android phone's PIN could be used to change Google account password
A report from The Wall Street Journal last week sounded the alarm on an obvious, but frightening issue on iPhone...
9to5google.com
EtherealRemnant said:
Good luck if your Google account ever gets breached. Or if Google one day bans your account like they've been known to do to others for seemingly no reason. I used Google's password manager for years but when this flaw was pointed out to me, I switched to Bitwarden that same day and I haven't looked back.
It's also very easy to breach your Google account and thus all your others if your phone is stolen.
Like iPhone, a stolen Android phone's PIN could be used to change Google account password
A report from The Wall Street Journal last week sounded the alarm on an obvious, but frightening issue on iPhone...
9to5google.com
Click to expand...
Click to collapse
These are all valid points but chances of happening are very slim.
Brava27 said:
Your choice. Google has never failed me.
Click to expand...
Click to collapse
Google also thanks you for all your data. But in all seriousness don't keep all your eggs in one basket. Using 1 service or company for everything (Like Google does) is a terrible security practice. I'm not saying don't use Google, I'm saying don't use it for everything PLUS (tinfoil hat time) the way things are going with less and less privacy, I expect Google to start using passwords saved in its services in an attempt to provide more services to users but in doing so they have access to everything about you, bank info, cellular carrier login, other email logins, everything and frankly that would frighten me. This is why I self host on bitwarden, everything is in my hard drive AND encrypted on backblaze.
spart0n said:
Google also thanks you for all your data. But in all seriousness don't keep all your eggs in one basket. Using 1 service or company for everything (Like Google does) is a terrible security practice. I'm not saying don't use Google, I'm saying don't use it for everything PLUS (tinfoil hat time) the way things are going with less and less privacy, I expect Google to start using passwords saved in its services in an attempt to provide more services to users but in doing so they have access to everything about you, bank info, cellular carrier login, other email logins, everything and frankly that would frighten me. This is why I self host on bitwarden, everything is in my hard drive AND encrypted on backblaze.
Click to expand...
Click to collapse
I definitely agree. I might just be really lazy and don't care anymore. I could tie tomorrow and all the passwords I had would be irrelevant lol.
Does Google password manager fill in apps?
I second avoiding LastPass. In addition to the semi-annual breaches, their pricing is ridiculous. $50/year to store 100kB of data in the cloud? There has been zero evolution to their app over the last 5 years, so it is not like they have heavy RnD costs.
Brava27 said:
I definitely agree. I might just be really lazy and don't care anymore. I could tie tomorrow and all the passwords I had would be irrelevant lol.
Click to expand...
Click to collapse
Your passwords will matter to family that left after you're gone. I have several people in my life that have a detailed guide on how to access my digital life if/when I'm gone.
Bank info, logins, email stuff, just to make thier lives easier getting things of mine closed etc.
spart0n said:
Your passwords will matter to family that left after you're gone. I have several people in my life that have a detailed guide on how to access my digital life if/when I'm gone.
Bank info, logins, email stuff, just to make thier lives easier getting things of mine closed etc.
Click to expand...
Click to collapse
Yeah that's true. My good friend just passed at 37. His poor wife couldn't access his iPhone and it made things very difficult to process things and get photos etc.... I will do this process for my wife.
Brava27 said:
These are all valid points but chances of happening are very slim.
Click to expand...
Click to collapse
Is it worth the risk for that slim chance? If someone gets ahold of your online identity, they can ruin every part of your life in a matter of minutes, all while you're totally locked out from being able to stop them. My Bitwarden isn't even tied to my Gmail address for the login and I keep my 2FA in Authy separately, with Authy set to not allow multi-device. It would be pretty difficult for anyone to breach me unless they put in a lot of work that my meager net worth wouldn't be worth doing.
Besides, Bitwarden is actually more convenient than Google's password manager in a lot of areas. When enabling the accessibility options, I've noticed that the password popup shows in places that Google's never did which means less having to manually copy and paste.
EtherealRemnant said:
Is it worth the risk for that slim chance? If someone gets ahold of your online identity, they can ruin every part of your life in a matter of minutes, all while you're totally locked out from being able to stop them. My Bitwarden isn't even tied to my Gmail address for the login and I keep my 2FA in Authy separately, with Authy set to not allow multi-device. It would be pretty difficult for anyone to breach me unless they put in a lot of work that my meager net worth wouldn't be worth doing.
Besides, Bitwarden is actually more convenient than Google's password manager in a lot of areas. When enabling the accessibility options, I've noticed that the password popup shows in places that Google's never did which means less having to manually copy and paste.
Click to expand...
Click to collapse
I'll look into bitwarden. Thanks
KeePass Offline; only caveat is that you have to back it up manually (so each time I update it, I copy it to other devices in case the phone dies or is erased or stolen; my password is super long but I only have to remember one password).