mvs-org / lightwallet

Metaverse blockchain wallet
https://www.myetpwallet.com
GNU Affero General Public License v3.0
58 stars 43 forks source link

PIN lock for app #76

Open canguruhh opened 6 years ago

canguruhh commented 6 years ago

if you open the app and the pin has not been entered within the last x minutes it should ask for a pincode (if has been set). pincode setup should be located in settings and the pincode should also be changeable by entering the current pincode or the passphrase. recovery by passphrase should also be possible from the pin prompt.

raflizo commented 6 years ago

Ultimately an option to unlock the app with a fingerprint from the phone's local database, that would be great, works really well in other apps. Also for example.. able to scan a fingerprint 3 times and then being forced to unlock it with the PIN code.

vorapoap commented 6 years ago

I think we should follow how bank app works. Meaning, you require to be active or need single pin to unlock the app while accessing account and creating transaction.

Meaning, I'd suggest - you need to encode and store password on the client browser 's storage during the PIN session. And use it for the whole usage session.

This means user has better seamless experience and dont need to enter password many times to do things.

But whenever time out, the PIN is needed again.

This may apply to the PC as well too. You may have this alternate consent/config page.

Please discuss this with your team. I think it will be reallly useful