Problem: if you use passcode unlock, anyone looking over your shoulder while you unlock your phone will immediately learn the code, and potentially use it against you.
@argv_minus_one Not a widespread option, but @GrapheneOS offers PIN scramble. Each time the PIN screen is offered the numbers are in different positions. Reeks havoc with muscle memory, but once you're used to it it's not that difficult.
@mikey@argv_minus_one GrapheneOS will be shipping our 2-factor biometric unlock feature soon. You'll be able to set a PIN which has to be entered to use face/fingerprint unlock. For example, you could set an 8 diceware word passphrase as your primary unlock method required for first unlock and enable fingerprint unlock for convenience but set a random 4-6 digit PIN as a 2nd factor for fingerprint unlock. This will be our recommended lock method configuration for most users once we ship this.
Multi-Level biometric passwords are a step further. It's interesting because many US agencies employ this methodology, and have done so for quite some time. It would be nice to see OEM options for this on smartphones, etc. A user effectively creates a pin code, that relies on a certain sequence of fingerprints being entered sequentially on the biometric scanner, this could be in combination with other biometrics or traditional passwords or alphanumerics.
@eff@Gizmodo It is such a pain to go back to PIN-based unlocks-- but as noted, it's the only line of defense right now against surveillance and law enforcement overreach.
It's always a shame when we have to deliberately kneecap ourselves because society won't allow us to have nice things.
Here's hoping that one day, precedent will change on this matter.
Add comment