Andotp: The app should 're-lock' (require credentials again)

Created on 13 Aug 2017  路  8Comments  路  Source: andOTP/andOTP

I would like it to re-lock and request device credentials again:

  • [x] Immediately after the screen has been locked
  • [x] After a certain time of non-usage (e.g. 60 seconds)
  • [x] Maybe: when exited through the back button
enhancement help wanted security
Source
picture asmw

All 8 comments

  1. This seems reasonable, I will look into it.
  2. Maybe. I still have to find a good way to detect user inactivity on Android ... anyone who knows how to do this feel free to submit a pull request.
  3. This should already happen. If I exit my app with the back button and switch back to it it will ask for authentication again.
flocke picture flocke on 16 Aug 2017

Indeed, 3 seems to work. I probably pressed the menu button.

asmw picture asmw on 16 Aug 2017

I just implemented 1, it will be included in the next release.

flocke picture flocke on 25 Aug 2017

Awesome! Thanks for your work.

asmw picture asmw on 25 Aug 2017

I bet you never saw this coming but, can we have 1 as an option? About once a month I go on a maintenance spree, using 2FA ~20 times in a row. So I have to unlock the app a lot!

icetbr picture icetbr on 23 Mar 2018

Sure, I had the idea already to make it optional. Just never had time to implement it.

flocke picture flocke on 23 Mar 2018
👍1

@icetbr Just implemented it, will be in the next version.

flocke picture flocke on 28 Mar 2018
🎉1

The last point (re-lock after inactivity) was just implemented in #390 :tada:

flocke picture flocke on 3 Feb 2020
Was this page helpful?
0 / 5 - 0 ratings

Related issues

MartinX3 picture MartinX3  路  4Comments
xiazeyu picture xiazeyu  路  3Comments
RichyHBM picture RichyHBM  路  3Comments
mbiebl picture mbiebl  路  4Comments
alonbl picture alonbl  路  7Comments