Database Develop

[SEARCH] Anti Thief App

I know there a lots of them on market. But I dont have the nerve to test them all. Can somebody recommend an app that sends me the phone number of the inserted sim card per SMS.
Would be cool if it also could send me the GPS location in a pre configured interval per SMS.
Thx...
i found one that is working perfectly for me...
App name ist "lost phone"
http://www.appbrain.com/app/com.gadgetprojects.lostphone

Not exactly what you're looking for, but Mobile Defense is a great, free anti-theft app with GPS tracking and remote lock.

I use WaveSecure. It has GPS tracking, online backup, remote wipe, remote lock, sms alerts and (importantly) uninstall protection.
I got a free subscription a couple of months back but I think you have to pay now.

Wouldn't a wipe via recovery console erase everything though?

monkey804 said:
Wouldn't a wipe via recovery console erase everything though?
Click to expand...
Click to collapse
Yea, you can always wipe from recovery but that isn't well known outside forums like this. It's unlikely a thief would figure that out before you've tracked him down and sent the rozzers round.

I found Mobile Security but I guess the app dev is no native english speaker (like me). His description for the "Security Code" feature is hard to read and understand. Any chance someone uses this app and can explain it to me?
el_smurfo said:
Not exactly what you're looking for, but Mobile Defense is a great, free anti-theft app with GPS tracking and remote lock.
Click to expand...
Click to collapse
I would like to receive the phone number. My GPS is turned off most of the time. A lock feature is nice indeed but i guess the phone lands in the next dumpster when its unusable.
goldenarmZ said:
I use WaveSecure. It has GPS tracking, online backup, remote wipe, remote lock, sms alerts and (importantly) uninstall protection.
I got a free subscription a couple of months back but I think you have to pay now.
Click to expand...
Click to collapse
I regulary buy paid apps but 20$ per year is too much i think.
monkey804 said:
Wouldn't a wipe via recovery console erase everything though?
Click to expand...
Click to collapse
jepp, but i hope the thief just inserts his sim first

smurf said:
I regulary buy paid apps but 20$ per year is too much i think.
Click to expand...
Click to collapse
Ouch. I didn't realise they were charging that much.
I'm pretty pleased I got the free subscription offer now..

smurf said:
I would like to receive the phone number. My GPS is turned off most of the time. A lock feature is nice indeed but i guess the phone lands in the next dumpster when its unusable.
Click to expand...
Click to collapse
Did you even check out the www.mobiledefense.com? I will report the current SIM information, including phone number. If you are rooted and install the app in system/app, it can also turn on the GPS itself, telling you the location of the phone.
https://www.mobiledefense.com/tour

el_smurfo said:
Did you even check out the www.mobiledefense.com? I will report the current SIM information, including phone number. If you are rooted and install the app in system/app, it can also turn on the GPS itself, telling you the location of the phone.
https://www.mobiledefense.com/tour
Click to expand...
Click to collapse
jepp, I did. The thing is I forgot to mention: its only available to Users in the United States

Besides Mobile Defense, there is Lookout. Although I don't think it has as much features though. I haven't kept up with it so I'm not sure. I don't think they give you the option to wipe your phone, but I'm positive they can do it if you ask them to.

smurf said:
jepp, I did. The thing is I forgot to mention: its only available to Users in the United States
Click to expand...
Click to collapse
Have you asked them about when they're planning to launch outside the United States? They might not be too far away.

What about viable alternatives for users looking for free protection outside the US?
Has anyone tried Anti DT (http://www.antidroidtheft.com/)? I've installed it but never used it (Thank God).
Features that are advertised on the website?
Email alerts when someone changes SIM cards
Online location tracking of your android device using GPS or Cell Towers (Any Web Browser)
Spy Camera: View images taken from your phone's camera.

i found one that is working perfectly for me...
App name ist "lost phone"
http://www.appbrain.com/app/com.gadgetprojects.lostphone

I also found "Lost Phone" one of the easyest. AND working, coz I have tried some other, inserted other SIM and nothing happening.. TRY before you buy and get your phone stolen
Too bad there isn't a wipe included. So to complete my anti-theft I added "Remote Wipe". Didn't test this one yet, need to backup my 16gb card first, don't wanna loose all that
If you have sensitive material from work on your phone you need something like this. Those two together put my heart at rest and bring me a "safer" phone.

I will give you a list as my G1 was stolen, I know these apps worked becuase it wokred for me but, the f*#^in" dumb... asssss I was saying... the cops never helped me go retrieve the phone. GPS number, cell number, and G1 box with IMEI number provided.
Enough with bad memories.... The List is :
Sim Checker will let you know of a new sim inserted in the phone as well as, the number and gps coordinates/number/location(address)
Wavesecure lets you add friends so they'll also know when your phone is stolen with features such as, Remote Sd card format, Remote lock, Phones will lock with an unknown sim, gps tracking, and backup of contacts, sms, call log, and now has uninstall protection.
GPS Tracker by Instamapper is a great way to track your phone in real time.
There are so many choices... I'd get them all!

Check out this one
This one identifies itself by IMEI, for each device a own APK is created.
You can control your mobile with sms commands, the itself is invisible, no app icon, nothing, and it can be changed to a system app.
Great
(I am NOT the dev, and I don't know him )

[Q] Security

New to android and captivate, so excuse me if I'm missing something..but it seems that with one's google account being tied into all the functions, including buying in the market with the credit card on file with google..there has to be a setting to not allow the device to be used with a different sim..or some kind of security that will lock down your google account if the phone is stolen? Is something built in..or is there an app out there that people generally use for peace of mind?
EDIT: All of the recent Nokia phones I've had has a setting to not allow a different sim to be used

fldude99 said:
New to android and captivate, so excuse me if I'm missing something..but it seems that with one's google account being tied into all the functions, including buying in the market with the credit card on file with google..there has to be a setting to not allow the device to be used with a different sim..or some kind of security that will lock down your google account if the phone is stolen? Is something built in..or is there an app out there that people generally use for peace of mind?
Click to expand...
Click to collapse
Very interesting. I too would like to know the answer. This is one of the many reasons why I NEVER use:
A) Mobile Banking
B) Purchases of any kind that includes Plastic
C) Setup any accounts that wire account info
Call me paranoid, but hey, it will save you a ton of headache on that unfortunate "if" day. Please keep us posted.

So does anybody have an answer...or at least some kind of marketplace app that is used for security?

So is nobody interested in security? Or is there just no simple solution..one thing that I miss on my Nokia N97 is the remote lock..send a text of a secret word, and poof the device is locked...done

I think people are interested to some degree but no widely known easy method. And just an fyi, rooting your phone and gaining superuser privileges - as many of us have done - creates a big security hole for trogin malware attack, so if you have rooted your phone take care and know what your installing and try to pay attention to anything using super user privileges.

[Q] Tracking a lost phone - When thief is not braindead

I checked out various apps which can locate lost phone(after stolen).
All work on the premise of installing app remotely from google play, and then sending SMS to your phone etc.,
However, there are a few caveats(with all such apps, and others too). they work for brain dead thieves.
Professional thiefs will throw away your sim card, and then put in a new sim(prepaid sims freely available).
For security, the owner of phone will obviously change the gmail password, right?
So if thief factory resets and wipes data, and then logs on with a different google play account, can you still track it?
Is there any app which allows to do the same?
Casual thieves can be caught, but what if somebody does a full wipe?
I think google tracks phones using device ID. Is it possible to track phone through google, even if android account(google account) being used on the phone is different?
Need help please.

Prevention is better than the cure.
If the phone has been stolen without any tracking software installed, then the chances of recovering it are a lot smaller than if tracking software was installed before it was stolen.
The best thing you can do is call your carrier and ask them to block the IMEI, if they care about you they may also track it down... Or at least do some kind of deal to get you a new phone.
The best tracking app in my opinion is Avast! Its free too !
There is an anti theft feature, which requires root, But it will install as a system app so a factory reset wont remove it. You can do a whole range of things via the webpage, such as activating mobile data, Turning GPS on so you can track it, You can also make the phone scream and shout 'warning this device has been lost or stolen'
This is a useful feature as only you can disable it, You can also enter a message which will be displayed on screen for the theif to see!
You can remotely lock and wipe the device, so the theif cannot change gmail account.
Its does a whole lot more too!

azzledazzle said:
Prevention is better than the cure.
If the phone has been stolen without any tracking software installed, then the chances of recovering it are a lot smaller than if tracking software was installed before it was stolen.
The best thing you can do is call your carrier and ask them to block the IMEI, if they care about you they may also track it down... Or at least do some kind of deal to get you a new phone.
The best tracking app in my opinion is Avast! Its free too !
There is an anti theft feature, which requires root, But it will install as a system app so a factory reset wont remove it. You can do a whole range of things via the webpage, such as activating mobile data, Turning GPS on so you can track it, You can also make the phone scream and shout 'warning this device has been lost or stolen'
This is a useful feature as only you can disable it, You can also enter a message which will be displayed on screen for the theif to see!
You can remotely lock and wipe the device, so the theif cannot change gmail account.
Its does a whole lot more too!
Click to expand...
Click to collapse
thanks
Will it work in the following scenario
1. thief Steals phone
2. Puts phone in custom recovery
3. Flashes a new ROM
4. Puts in a new SIM
5. Uses a different google account.
Google has IMEI number of devices used. So can google let me know which user has the phone after its been stolen, if I give them a copy of the police report or something.

Actually Samsung have a free tracking and after-theft service.
You can set it up on the phone and on the samsung website.
It works even if they use the phone on the moon after having it
flushed through a toilet....So why bother in using third party apps and services ??
http://howto.cnet.com/8301-11310_39...-and-control-samsung-galaxy-devices-remotely/
This is an old 'howto'. The samsung dive also works for the Note.

tsk1979 said:
thanks
Will it work in the following scenario
1. thief Steals phone
2. Puts phone in custom recovery
3. Flashes a new ROM
4. Puts in a new SIM
5. Uses a different google account.
Google has IMEI number of devices used. So can google let me know which user has the phone after its been stolen, if I give them a copy of the police report or something.
Click to expand...
Click to collapse
Google are a massive company, I doubt they will help 1 individual person, but its sure worth a try
as for the scenario, If the theif flashes a new ROM, it will overwrite /system so any previous system apps will be removed.
But, bear in mind, not everyone is an android freak like us most people wont know what recovery is, or how to flash a ROM, so this should give you enough time to track it down via the website.
For the freaks that do know what they're doing, Well I guess thats unfortunate, No security can withstand the knowledge we have, You will just have to hope they have a nice heart and will return it.

How about 'android lost' application?
Sent from my GT-N7000 using xda premium

dsmas said:
How about 'android lost' application?
Sent from my GT-N7000 using xda premium
Click to expand...
Click to collapse
I have changed my google password. So thief will probably use new market account. Now the question is, if phone comes online via a different market account, can I still control it?

lost my phone (galaxy S2) yesterday or it got stolen - i dont know excactly.
BUT the phone is still on, even 3G.
so is there any app which i could install through the market and track it?
plan b won't work because i have android 4.x

Lun4cy said:
lost my phone (galaxy S2) yesterday or it got stolen - i dont know excactly.
BUT the phone is still on, even 3G.
so is there any app which i could install through the market and track it?
plan b won't work because i have android 4.x
Click to expand...
Click to collapse
Do you have stock tw rom on your s2 if yes then Log onto www.samsungdive.com from their you can control your device by loging into your samsung account.. Good luck :thumbup:
Ps: if you have a cm rom then use this app https://play.google.com/store/apps/details?id=com.androidlost worked on my htc desire pretty good when i lost it in my college
Sent from my GT-N7000 using Tapatalk 2

abhinav quietly brilliant said:
Do you have stock tw rom on your s2 if yes then Log onto www.samsungdive.com from their you can control your device by loging into your samsung account.. Good luck :thumbup:
Sent from my GT-N7000 using Tapatalk 2
Click to expand...
Click to collapse
unfortunately not :/
got a costum rom and i think i removed all samsung apps.

Who needs phone location track and how to track phone location with this OX MobileSpy
tsk1979 said:
I checked out various apps which can locate lost phone(after stolen).
All work on the premise of installing app remotely from google play, and then sending SMS to your phone etc.,
However, there are a few caveats(with all such apps, and others too). they work for brain dead thieves.
Professional thiefs will throw away your sim card, and then put in a new sim(prepaid sims freely available).
For security, the owner of phone will obviously change the gmail password, right?
So if thief factory resets and wipes data, and then logs on with a different google play account, can you still track it?
Is there any app which allows to do the same?
Casual thieves can be caught, but what if somebody does a full wipe?
I think google tracks phones using device ID. Is it possible to track phone through google, even if android account(google account) being used on the phone is different?
Need help please.
Click to expand...
Click to collapse
Company who distribute cell phones always want to learn whether their employees are in rational use of vehicle and they go to the place where they should go, Cell Phone GPS Tracker gives you detailed information you want to learn with GPS location.
Location-specific information can be tracked especially for person who get lost when travelling unfamiliar places, or elder parents who are in amnesia may forget where home is, children get lost and so on. Then this OX Mobile Spy mobile phone location track function urgently needed.
OX mobile spy is both a mobile phone information backup software and a spy-tracking software, Which all depends on how to use it and how to review of it. By the using of it's backup function, you can easily backup contacts, messages, calls to your own email. By the using of it's spy-tracking software, you can use ox mobile spy's GPS location trace to find lost persons, use software installed in cellphone, messages, contacts and calls information to monitor your kid's suspicious behaviour.
Download: http://download.cnet.com/OX-Mobile-Spy/3000-2162_4-75909600.html

Exact GPS location with latitude and longitude, I like this program.

How-to get paid apps outside the USA

Seriously s*cks how we (non US folk) are being treated like second rank citizens... but we won't let that stop us from getting our entertainment, will we
DISCLAIMER : I'm not responsible if your account gets banned, your gear vr goes up in smoke or your paid content is taken away at some point.
how to ...
1:
go to the play store and get the app HOLA
it's a VPN which will allow you to launch oculus home app as if you were in the USA
if you do it correctly, you will see all the paid apps
2: ***** APPARENTLY THIS STEP NOT REQUIRED .. ALL CC ACCEPTED *****
now you need a US based credit card ...
go to neteller.com, create an account
put some money in the account (many different payment methods)
choose to receive a 'Net+' card, basically a mastercard from Neteller
I have one, and even though I live in the Netherlands, it's accepted as a US card. (sometimes thats a problem, today its a blessing)
your card will come via snail mail in about 4-5 days
3:
in Oculus home, go to settings, add payment method
enter your CC details
they also want a state/city/zip ... just choose a US city and Google their zip codes.
This works 100% for me, however when you are not connected to the VPN your paid games and apps will not showup. And who knows, we are probably breaking TOS so they could potentially take the content away from you.

axewater said:
Seriously s*cks how we (non US folk) are being treated like second rank citizens... but we won't let that stop us from getting our entertainment, will we
DISCLAIMER : I'm not responsible if your account gets banned, your gear vr goes up in smoke or your paid content is taken away at some point.
how to ...
1:
go to the play store and get the app HOLA
it's a VPN which will allow you to launch oculus home app as if you were in the USA
if you do it correctly, you will see all the paid apps
2:
now you need a US based credit card ...
go to neteller.com, create an account
put some money in the account (many different payment methods)
choose to receive a 'Net+' card, basically a mastercard from Neteller
I have one, and even though I live in the Netherlands, it's accepted as a US card. (sometimes thats a problem, today its a blessing)
your card will come via snail mail in about 4-5 days
3:
in Oculus home, go to settings, add payment method
enter your CC details
they also want a state/city/zip ... just choose a US city and Google their zip codes.
This works 100% for me, however when you are not connected to the VPN your paid games and apps will not showup. And who knows, we are probably breaking TOS so they could potentially take the content away from you.
Click to expand...
Click to collapse
You dont seem to need to do step #2, just use a US IP and put your credit card in normally.

Link to Hola on Google Play:
https://play.google.com/store/apps/details?id=org.hola
Thanks for the guide mate!

Do you guys have checked app permissions of HOLA VPN? And do you feel confortable to use your credit card through a free VPN that ask you access to your identity, position, device ID, etc?

dalamario said:
Do you guys have checked app permissions of HOLA VPN? And do you feel confortable to use your credit card through a free VPN that ask you access to your identity, position, device ID, etc?
Click to expand...
Click to collapse
The folks at HOLA are not able to intercept the transaction, there is another layer of encryption. We are basically putting an SSL encrypted 'letter' into another encrypted VPN envelope... They can decrypt the VPN packets (and they must in order to forward them to the final destination) but not the SSL layer.
Although SSL is pretty broken, based on a broken trust model and broken code ... but in theory .. we should be ok.
HOLA can have all my identity info, device id, position ... have fun with it. They are providing me a valuable service for 'free'. I'm ok with that as long as they stay out of my bank account and dont steal my private pictures

Domen Lo said:
You dont seem to need to do step #2, just use a US IP and put your credit card in normally.
Click to expand...
Click to collapse
Can you let us know what kind of CC you used ? Is it a Canadian one ? .EU ? Asia ?

axewater said:
Can you let us know what kind of CC you used ? Is it a Canadian one ? .EU ? Asia ?
Click to expand...
Click to collapse
Eu card, works fine. Other continents work fine as well, judging from the posts on other forums.

Credit card companies are usually pretty good with customer protection against fraud so hopefully we should be ok
Sent from my SM-N910G using XDA Premium 4 mobile app

axewater said:
Seriously s*cks how we (non US folk) are being treated like second rank citizens... but we won't let that stop us from getting our entertainment, will we
DISCLAIMER : I'm not responsible if your account gets banned, your gear vr goes up in smoke or your paid content is taken away at some point.
how to ...
1:
go to the play store and get the app HOLA
it's a VPN which will allow you to launch oculus home app as if you were in the USA
if you do it correctly, you will see all the paid apps
2:
now you need a US based credit card ...
go to neteller.com, create an account
put some money in the account (many different payment methods)
choose to receive a 'Net+' card, basically a mastercard from Neteller
I have one, and even though I live in the Netherlands, it's accepted as a US card. (sometimes thats a problem, today its a blessing)
your card will come via snail mail in about 4-5 days
3:
in Oculus home, go to settings, add payment method
enter your CC details
they also want a state/city/zip ... just choose a US city and Google their zip codes.
This works 100% for me, however when you are not connected to the VPN your paid games and apps will not showup. And who knows, we are probably breaking TOS so they could potentially take the content away from you.
Click to expand...
Click to collapse
Can you teach me on how I can install BBC i-Player on my Android phone from the USA?

So UK owners can't use their credit cards for payments on the UK release devises?

Biometric Authentication - Banking apps.

Make sure you put 1* reviews on your Banking apps or all apps that need updating to support face unlock, hopefully it will help speed up the development and support of face unlock on the pixel 4. I am really missing fingerprint unlock on my apps!

Demolition49 said:
Make sure you put 1* reviews on your Banking apps or all apps that need updating to support face unlock, hopefully it will help speed up the development and support of face unlock on the pixel 4. I am really missing fingerprint unlock on my apps!
Click to expand...
Click to collapse
Why? I just contacted my credit union asking for them to add support. Maybe larger national banks and stuff should have been aware and had support ready but smaller, more local institutions might just need to know that it's a thing on Android now.
Sent from my Pixel 4 XL using XDA Labs

In the Play Store, you can reach out to contact each app's development team via email. I've written to Chase, Bank of America, Mint, Credit Karma, and the other apps I use. Some developers are aware that they need to update, others aren't. Here are some of the responses I've received.
My original email (to each app):
Please update the Android app to support the biometric API so that I can use the secure face unlock on my Pixel 4! Thank you!
Click to expand...
Click to collapse
Bank of America:
Thank you for your feedback and we apologize for the inconvenience. We are working to update to the latest biometric authentication for the Pixel 4 and expect to have a supporting app shortly. For now, sign-in to the app using your online ID and password. Please look out for an app update soon.
Click to expand...
Click to collapse
Chase:
We'll be happy to review your request to update the
Android App.
Ivan, please note that the Chase Mobile App will work on
any Android smart phone or tablet running Android
operating system 5.0 (Lollipop) or higher. The minimum
operating system is 5.0 or higher. If your mobile phone
does not have the minimum requirement, the Chase Mobile
app will not be compatible.
We want our mobile app users to have the best experience
possible, so we regularly test chase.com using the most
current versions of operating systems. Since some mobile
app functionality may not work well on older operating
systems, we ask that you perform these updates. We
recommend you update your operating system and application
to the newest versions available. If your device isn't set
up to receive updates automatically, you can get the We
recommend you update your operating system and application
to the newest versions available.
We appreciate your business and thank you for choosing
Chase.
Click to expand...
Click to collapse
Credit Karma:
To determine if your Touch ID or Face ID function is turned on or off, go into your settings by clicking the icon in the top right corner of the app. The directions are the same whether you’re using Touch ID or Face ID.
If Touch or Face ID is turned on you will see a green circle with a white check mark.
If it’s turned off, simply click the empty circle and you’ll be prompted with a message stating the fingerprints or face registered on your phone can be used to access your Credit Karma account. Click “OK” to this prompt and you will be asked to enter your PIN to confirm this change.
Touch or Face ID is now turned on and you will be allowed to use this function to access the Credit Karma app moving forward.
Please note that if you log out of your account, the next time you open the app you’ll be prompted to enter your email address and password.
Thanks so much,
Click to expand...
Click to collapse
I've been sending further follow-ups to the ones who clearly don't understand what we are asking.
The more people who contact them, the more they'll understand that their apps are the problem by not using the current API.

I think Chase already stated that they were going to have an update before the end of the year. Hopefully sooner rather than later.

Robinhood works!

btonetbone said:
In the Play Store, you can reach out to contact each app's development team via email. I've written to Chase, Bank of America, Mint, Credit Karma, and the other apps I use. Some developers are aware that they need to update, others aren't. Here are some of the responses I've received.
My original email (to each app):
Bank of America:
Chase:
Credit Karma:
I've been sending further follow-ups to the ones who clearly don't understand what we are asking.
The more people who contact them, the more they'll understand that their apps are the problem by not using the current API.
Click to expand...
Click to collapse
Very nice work, I have left reviews and also contacted all my Banks via email. Hopefully it speeds up the process.

Throwing up a bunch of one-star reviews won't help, and all it serves to do is make the rater (you) look petty and childish. I'll send an email to my institutions, like a grownup, and go from there.

Getting in contact directly works best, via the play store will get you to the android app devs. I usually go through Twitter and you get a spokesperson who wouldn't know an apk from an adb and will give a stock response of soon™.
Remind them that the old biometric APIs are deprecated and that they should update to current versioning. Should anything happen they don't want to be the story of the bank that wasn't able to keep up.

Honestly I'm not missing it that much for my bank that much because I use LastPass which autofills it quickly. I do miss it for Outlook though because I have to do a pin.
Sent from my Pixel 4 XL using Tapatalk

So Far E-Trade has been updated to the Pixels face Unlock... I sent an email via the app store also to a credit union hoping they will update their app. I'm hoping within the next 2 weeks to a month that all major banks will update...

How secure if this anyway? I mean, my banking account has a password. I enter that password in my banking app to log into my account. In the future I will use my facial scan to log into my banking app.
Does that mean my banking account will have two password (1x password + 1x facial scan) oder will my password be stored somewhere in the app or on android and simply be passed on the my facial scan is verified?
Both do not sound very secure to me.

If you don't feel it's secure then just don't use the app.. simple. I trust that the banks know the risks and have mitigated them. After all they are the ones on the hook if there's fraud.

bobby janow said:
If you don't feel it's secure then just don't use the app.. simple. I trust that the banks know the risks and have mitigated them. After all they are the ones on the hook if there's fraud.
Click to expand...
Click to collapse
Not really the informative answer I was looking for.
I wouldn't blindly trust a bank app or any of the other countless apps that would use my facial scan.
What happens if your facial scan gets stolen / leaked. Everyone with that information will for ever be able to access your data. And you can't even change your access code like you would be able to with a password.
And it seems like you also have no idea where your facial scan is being saved, and how it is secured / locked down. Maybe it is just a plain file on your phone's storage? You don't seem to know.
Why no simply write down all your passwords in a .txt file and save it on your sdcard? That would alteast have the advantage that you could change your password at some point.

Utini said:
Not really the informative answer I was looking for.
I wouldn't blindly trust a bank app or any of the other countless apps that would use my facial scan.
What happens if your facial scan gets stolen / leaked. Everyone with that information will for ever be able to access your data. And you can't even change your access code like you would be able to with a password.
Click to expand...
Click to collapse
Isn't the face unlock for that device only? It's not like someone can install your bank app on their phone, somehow use your face unlock information, and spoof you on that device. Also there's still 2 step verification, at least with my bank, so the new app would still need to get the verification code. If anything, it's easier to do with your password because that's something that can be typed in and then somehow get the verification code text.
Sent from my Pixel 4 XL using Tapatalk

Utini said:
Not really the informative answer I was looking for.
I wouldn't blindly trust a bank app or any of the other countless apps that would use my facial scan.
What happens if your facial scan gets stolen / leaked. Everyone with that information will for ever be able to access your data. And you can't even change your access code like you would be able to with a password.
Click to expand...
Click to collapse
I'm not sure of the question you are asking. It seemed rhetorical to me basically commenting on how you don't think fingerprint, facial or password entry is secure on your app. I don't think any of it is stored in the cloud but nonetheless it's probably not as secure as walking into your bank and transacting with a teller. Even websites probably aren't as secure as you wish they were. So what exactly are you asking that you expect a reply to? You can perhaps check with your bank as to what your liability would be if your account got hacked.

EeZeEpEe said:
Isn't the face unlock for that device only? It's not like someone can install your bank app on their phone, somehow use your face unlock information, and spoof you on that device. Also there's still 2 step verification, at least with my bank, so the new app would still need to get the verification code. If anything, it's easier to do with your password because that's something that can be typed in and then somehow get the verification code text.
Sent from my Pixel 4 XL using Tapatalk
Click to expand...
Click to collapse
Oh is it? That makes it defeniately more secure. But then I would still like to know how it is ensured that my facial scan only works with my specific mobile device and not with any other mobile device.
Yep for banking there is still 2 step verficiation. Good point. But I was actually thinking more about e.g. KeePass.
bobby janow said:
I'm not sure of the question you are asking. It seemed rhetorical to me basically commenting on how you don't think fingerprint, facial or password entry is secure on your app. I don't think any of it is stored in the cloud but nonetheless it's probably not as secure as walking into your bank and transacting with a teller. Even websites probably aren't as secure as you wish they were. So what exactly are you asking that you expect a reply to? You can perhaps check with your bank as to what your liability would be if your account got hacked.
Click to expand...
Click to collapse
Maybe I didn't explain my question good enough. I will try again:
Currently I would unlock e.g. my KeePass Database with a password.
In the future I would use my facial scan for that.
I wonder at what point my facial scan will access my password of the KeePass Database, because it somehow has to know my password in order to unlock KeePass?
And in that case my password suddenly isn't saved only in my head anymore but also within android or another app (because Face Unlock has to somehow know it?).
Or will my KeePass database get a second "password" which is my facial scan data?
In that case I want to make sure that my facial scan is very secure and can't be stolen. Because if it turns up in smth like "haveibeenpwnd.com" everyone will forever be able to access all my files with my leaked facial scan which I cannot even change to something different anymore.

Utini said:
Maybe I didn't explain my question good enough. I will try again:
Currently I would unlock e.g. my KeePass Database with a password.
In the future I would use my facial scan for that.
I wonder at what point my facial scan will access my password of the KeePass Database, because it somehow has to know my password in order to unlock KeePass?
And in that case my password suddenly isn't saved only in my head anymore but also within android or another app (because Face Unlock has to somehow know it?).
Or will my KeePass database get a second "password" which is my facial scan data?
In that case I want to make sure that my facial scan is very secure and can't be stolen. Because if it turns up in smth like "haveibeenpwnd.com" everyone will forever be able to access all my files with my leaked facial scan which I cannot even change to something different anymore.
Click to expand...
Click to collapse
I used LastPass and I think it's not different then when I died the fingerprint option for it. There's a master password for the account and biometric login is, again, just for the individual device. And again, there's 2 step verification at least with LastPass, for whenever you set up.
Sent from my Pixel 4 XL using Tapatalk

EeZeEpEe said:
I used LastPass and I think it's not different then when I died the fingerprint option for it. There's a master password for the account and biometric login is, again, just for the individual device. And again, there's 2 step verification at least with LastPass, for whenever you set up.
Sent from my Pixel 4 XL using Tapatalk
Click to expand...
Click to collapse
Sounds interesting and secure. Now I am interested in how it is ensured that my fingerprint / facial scan will only work with my specific mobile device and that the stolen data from my device can't be used from another device

Utini said:
Oh is it? That makes it defeniately more secure. But then I would still like to know how it is ensured that my facial scan only works with my specific mobile device and not with any other mobile device.
Yep for banking there is still 2 step verficiation. Good point. But I was actually thinking more about e.g. KeePass.
Maybe I didn't explain my question good enough. I will try again:
Currently I would unlock e.g. my KeePass Database with a password.
In the future I would use my facial scan for that.
I wonder at what point my facial scan will access my password of the KeePass Database, because it somehow has to know my password in order to unlock KeePass?
And in that case my password suddenly isn't saved only in my head anymore but also within android or another app (because Face Unlock has to somehow know it?).
Or will my KeePass database get a second "password" which is my facial scan data?
In that case I want to make sure that my facial scan is very secure and can't be stolen. Because if it turns up in smth like "haveibeenpwnd.com" everyone will forever be able to access all my files with my leaked facial scan which I cannot even change to something different anymore.
Click to expand...
Click to collapse
Oh I see now. This really has more to do with your password manager than the bank. Unfortunately, I don't use a PM even though I suppose I should. Everyone says it's pretty secure. Since I don't really know what I'm talking about at this point I'll give it a shot anyway. lol
I don't think the facial scan or the fingerprint scan is saved anywhere other than your device. But I do use fingerprint (or did) scans on my banking app. If I change my password on the banking site my fingerprint scan will no longer work on the app. I would first have to change my password on the app and then reregister my fingerprint when the new password is entered. Can we compare it to the face scan at this point? I mean you can't change your fingerprints either right? Before I go on, am I reading your concerns correctly?

Utini said:
Sounds interesting and secure. Now I am interested in how it is ensured that my fingerprint / facial scan will only work with my specific mobile device and that the stolen data from my device can't be used from another device
Click to expand...
Click to collapse
https://support.google.com/pixelphone/answer/9517039?hl=en
Maybe this confirms it?View attachment 4860867
Sent from my Pixel 4 XL using Tapatalk