kryptco / krypton-android

DEPRECATED Krypton turns your Android device into a U2F Authenticator: strong, unphishable 2FA.
https://krypt.co
Other
203 stars 50 forks source link

Do not unlock phone if not necessary #70

Open kennylevinsen opened 7 years ago

kennylevinsen commented 7 years ago

I respond to signing requests from my watch, and it's slightly annoying that my phone unlocks in my pocket when I do that.

Either only do it if necessary, or make it optional.

mrinalwadhwa commented 7 years ago

@joushou I was curious about you comment so thought I'll give it a test. I have Gear S3 paired to to Galaxy S7 and the Lock Screen is using password auth. In my setup ..

  1. Phone screen locked and was showing the clock.
  2. Approval request appeared on the watch, phone screen stayed locked.
  3. I approved the request on my watch, the phone screen lit up and showed a password prompt but it was still locked.
kennylevinsen commented 7 years ago

Yes, kryptonite cannot bypass the lock screen. I may have been unclear there.

However, I have Google Smartlock enabled, meaning that as long as my watch is connected, lock timeout becomes 4 hours. This results in my phone unlocking and going to the home screen on sign response, potentially doing funny stuff in my pocket.

kcking commented 7 years ago

Oh interesting, Smartlock must be the reason behind it. Does this happen for manual approvals only, or auto approvals as well?

kennylevinsen commented 7 years ago

It does not happen on auto-approve. I believe it's related to how the notification action ("once", "1 hour", "reject") is managed.

I would assume that without smartlock, assuming the lock timeout has been reached, my phone would wake up on the lock screen in my pocket rather than my launcher. My pocket is unfortunately perfectly capable of autonomously navigating a capacitive touch screen, and the lock screen has fun things to accidentally press such as a camera, google assistant, emergency information (which I believe can dial emergency contacts) and emergency dialing. :(