S3Drive - In-app pin lock suggestions

It would be really great if you can 1. Select if it will immediately lock if user is not focused on app or by timer (30 seconds, 1 minute, 5 minutes, 10-30 minutes and so on). 2. A lock icon so you can just lock it if you want or not. The current feature of In-app pin lock is good but let's say you just want to do something for a second or minute, it will lock again and it's kinda annoying. I'm not sure if it applies to others but majority surely can agree. XD

NCryptsion (加密)

It would be really great if you can 1. Select if it will immediately lock if user is not focused on app or by timer (30 seconds, 1 minute, 5 minutes, 10-30 minutes and so on). 2. A lock icon so you can just lock it if you want or not. The current feature of In-app pin lock is good but let's say you just want to do something for a second or minute, it will lock again and it's kinda annoying. I'm not sure if it applies to others but majority surely can agree. XD

Also it would be good to have an option like "Remove pin" but it automatically logouts everything or something. And like an anti-brutefoce feature.

NCryptsion (加密)

It would be really great if you can 1. Select if it will immediately lock if user is not focused on app or by timer (30 seconds, 1 minute, 5 minutes, 10-30 minutes and so on). 2. A lock icon so you can just lock it if you want or not. The current feature of In-app pin lock is good but let's say you just want to do something for a second or minute, it will lock again and it's kinda annoying. I'm not sure if it applies to others but majority surely can agree. XD

Added feature request: https://features.s3drive.app/posts/313/lock-screen-configure-lock-time

Lock screen, configure lock time · S3Drive

Lock screen, configure lock time As requested by our user: https://discord.com/channels/1069654792902815845/1503972465586602055 It would be really gre

NCryptsion (加密)

Also it would be good to have an option like "Remove pin" but it automatically logouts everything or something. And like an anti-brutefoce feature.

You shall be able to toggle it off. Does it work for you?

but it automatically logouts everything or something.

It shouldn't really log you out, it should simply toggle it off. Can you send some screenshot / video or describe the exact behaviour on your end?

And like an anti-brutefoce feature.

As far I remember, after 3 failed attempts, apps quit, which should slow down an attacker. Perhaps additonal "wait time" would be a good thing, but as such we didn't want to compete with native OS security measures. Our in-app lock screen isn't to replace OS built-in security, but rather provide additional layer of defense, to protect your privacy when you hand out your phone to a friend or a partner. If you lose your phone or someone steals it from you then OS prompt should prevent adversary from getting access to your data. We're open on feedback on this and happy to improve this functionality as needed. (edited)

Hi.

You shall be able to toggle it off. Does it work for you?

Yup, I can turn it off.

It shouldn't really log you out, it should simply toggle it off. Can you send some screenshot / video or describe the exact behaviour on your end?

Oh I was referring to adding a feature like that just incase you forgot the pin because it doesn't have any so if you forgot the pin you will have to do a full reinstall than just click something like "Forgot PIN".

As far I remember, after 3 failed attempts, apps quit, which should slow down an attacker. Perhaps additonal "wait time" would be a good thing, but as such we didn't want to compete with native OS security measures. Our in-app lock screen isn't to replace OS built-in security, but rather provide additional layer of defense, to protect your privacy when you hand out your phone to a friend or a partner.

My bad, I should have tested fully before inquiring about it and thank you for the insight. And yeah program PINs are only additional layers to protect privacy in case someone else uses your device but if it's compromised, it's another story.

NCryptsion (加密)

Hi.

You shall be able to toggle it off. Does it work for you?

Yup, I can turn it off.

It shouldn't really log you out, it should simply toggle it off. Can you send some screenshot / video or describe the exact behaviour on your end?

Oh I was referring to adding a feature like that just incase you forgot the pin because it doesn't have any so if you forgot the pin you will have to do a full reinstall than just click something like "Forgot PIN".

As far I remember, after 3 failed attempts, apps quit, which should slow down an attacker. Perhaps additonal "wait time" would be a good thing, but as such we didn't want to compete with native OS security measures. Our in-app lock screen isn't to replace OS built-in security, but rather provide additional layer of defense, to protect your privacy when you hand out your phone to a friend or a partner.

My bad, I should have tested fully before inquiring about it and thank you for the insight. And yeah program PINs are only additional layers to protect privacy in case someone else uses your device but if it's compromised, it's another story.

Oh I was referring to adding a feature like that just incase you forgot the pin because it doesn't have any so if you forgot the pin you will have to do a full reinstall

To be honest, for us that sounds like an ideal solution. If user loses PIN, then they need to reinstall the app, in that case it's OS responsibility to remove all the app data and start clean. Reinstalling app isn't massive undertaking for a user who lost their PIN (I believe). If we were to provide "Reset / start again" button, then the responsibility to delete all the data correctly is on us, instead of OS. Implementing a functionality to handle edge case (providing easier way to reset PIN), but risk security/privacy isn't our preferred approach. (edited)

Tom

Oh I was referring to adding a feature like that just incase you forgot the pin because it doesn't have any so if you forgot the pin you will have to do a full reinstall

To be honest, for us that sounds like an ideal solution. If user loses PIN, then they need to reinstall the app, in that case it's OS responsibility to remove all the app data and start clean. Reinstalling app isn't massive undertaking for a user who lost their PIN (I believe). If we were to provide "Reset / start again" button, then the responsibility to delete all the data correctly is on us, instead of OS. Implementing a functionality to handle edge case (providing easier way to reset PIN), but risk security/privacy isn't our preferred approach. (edited)

I see, that make sense. Do you think it would be good to at least put a notice? I'm pretty sure sooner or later, someone will open a thread for a help related to this.

NCryptsion (加密)

I see, that make sense. Do you think it would be good to at least put a notice? I'm pretty sure sooner or later, someone will open a thread for a help related to this.

Yes, notice would be good.