Allow the extra password as an app unlock method on iOS and Android
When the extra password is enabled, Proton Pass only asks for it when signing in on a device. After that, the mobile app can only be unlocked with a PIN or Face ID/biometrics, so the extra password plays no part in day-to-day access to the vault on the phone.
Please add "Extra password" as an unlock method in the app lock settings, next to PIN and biometrics, so the app asks for it every time it opens or auto-locks.
Why:
- A PIN is short and easy to observe over someone's shoulder. A strong extra password is not.
- Biometrics can be used without consent, for example by holding the phone to the owner's face.
- Users who set an extra password have already chosen a stronger secret for Pass. Letting it guard the app too makes it protect the device, not just new sign-ins.
- Entering it regularly also keeps it from being forgotten, which matters because losing it means losing access to Pass.
Optional alternative: keep PIN or biometrics for quick unlock, but require the extra password periodically (for example every few days) or after a number of failed PIN attempts.