Option to not revert to iPhone default passcode when FaceID fails.
Using FaceID is very useful, but not that secure if your iPhone system passcode has been compromised.
When iOS FaceID fails there should be an option to revert to the Protonmail Application pin code instead of the iOS system passcode. This way a compromised phone wouldn't immediately give access to email as well.
-
N commented
This should be on all proton apps.
-
Paul commented
for iPadOS as well please
-
betatester83742 commented
This functionality is essential for those who live in big cities, where it is not uncommon for criminals to steal your iPhone and force you to give them your passcode.
Apple in iOS 17.3 made a lot of progress on this issue, creating the "Stolen Device Protection" for the Apple account, but critical apps like ProtonMail need to follow the same path.
Another option to a PIN code is to request the proton password instead of the iPhone passcode when the FaceID fails. Bitwarden, for example, requests the master password in this situation.
Regardless of the solution, it is clear to me that unlocking the app using the iPhone's passcode is insecure.
Please implement this!
-
Gegek commented
2 years and no updates on this yet? Proton Pass already supports it, would be awesome if the mail app also did.
Like the other commenter said, I also live in a large urban city, and given how easy it is to change an iCloud password just with the iPhone PIN, using the iPhone PIN to unlock my mail app would mean loosing pretty much my whole digital life, as I use Proton Pass and Proton Drive which are also acessible if someone gets access to my Proton Mail. Plus, there is no Proton Bridge for iOS, so I'm stuck with the official Mail app, having to type my custom mail app PIN (which doesn't even supports letters or symbols, just numbers, WTF proton???) in public everytime I want to check my emails.
It's frustating how a company who claims to be focused on security and privacy doesn't support such an essential feature like this.
I'm sad because I really like Proton products and am an active user of most of them, but this honestly leaves me no option. Goodbye Proton Unlimited. If anyone else is frustated by this and is looking for alternatives, I'm going with iCloud+1Password+Fastmail+A decent mail client like Airmail or Canary.
-
Anonymous commented
Exactly! I'm actually shocked ProtonMail allows this. I use Airmail and Canary also for different accounts and both those apps let you create alternative passcodes different from the iPhone passcode.
I live in a large urban city where a lot of people get robbed and are forced to give over their passcode or thieves target people using their passcode at a bar and then steal their phone. WSJ just did a piece on this today https://www.youtube.com/watch?v=QUYODQB_2wQ