{"action":"created","issue":{"url":"https://api.github.com/repos/voisine/breadwallet/issues/157","labels_url":"https://api.github.com/repos/voisine/breadwallet/issues/157/labels{/name}","comments_url":"https://api.github.com/repos/voisine/breadwallet/issues/157/comments","events_url":"https://api.github.com/repos/voisine/breadwallet/issues/157/events","html_url":"https://github.com/voisine/breadwallet/issues/157","id":58508411,"number":157,"title":"Touch ID and Passcode","user":{"login":"eragmus","id":11140618,"avatar_url":"https://avatars.githubusercontent.com/u/11140618?v=3","gravatar_id":"","url":"https://api.github.com/users/eragmus","html_url":"https://github.com/eragmus","followers_url":"https://api.github.com/users/eragmus/followers","following_url":"https://api.github.com/users/eragmus/following{/other_user}","gists_url":"https://api.github.com/users/eragmus/gists{/gist_id}","starred_url":"https://api.github.com/users/eragmus/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/eragmus/subscriptions","organizations_url":"https://api.github.com/users/eragmus/orgs","repos_url":"https://api.github.com/users/eragmus/repos","events_url":"https://api.github.com/users/eragmus/events{/privacy}","received_events_url":"https://api.github.com/users/eragmus/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/voisine/breadwallet/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":11,"created_at":"2015-02-22T16:30:54Z","updated_at":"2015-02-26T00:49:28Z","closed_at":null,"body":"I'm perplexed by the latest update's implementation of Touch ID and PIN code.\r\n\r\nI appreciate being able to open the app without any friction (no prompt for Touch ID or PIN), and that the balance is hidden and transactions can't be initiated. However, why is the transaction history visible? That's private information; I definitely would not want someone to be able to glance through my history.\r\n\r\nI suggest the following:\r\n\r\n1. Prompt for Touch ID to allow access to the app, as a whole. Touch ID takes barely 1 second to complete authentication, so it's essentially friction-less, plus it will protect viewing of things like balance and transaction history. You could still make it operate as 'tap to show balance', to protect privacy of that, but no need to use Touch ID or PIN to protect it. Also, even though Touch ID is less secure than a passcode, by using it in this way you are only protecting the more trivial things.\r\n\r\n2. Prompt for passcode, whenever making a (send) transaction. This is the most important thing to protect, so I'd like to be able to protect it with a passcode. Personally, I would never use the new feature to allow transactions (of any amount) without any authentication (and every banking mobile app I've seen uses authentication to get into the app, Touch ID or password -- no finance app allows transactions of any size to be made without authentication).\r\n\r\nThe benefit to the above is that it's essentially 2FA, since it's something you have (Touch ID - finger) along with something you know (passcode). It also balances security with convenience.\r\n\r\nP.S. I'd love to be able to choose a custom length of the passcode, just as Apple allow. i.e. Default is 4 characters, but I'd love to be able to use 10 characters, for example.\r\n\r\nP.S.S. For those without Touch ID on their device, you could replace the use of Touch ID, above, with a passcode."},"comment":{"url":"https://api.github.com/repos/voisine/breadwallet/issues/comments/76100984","html_url":"https://github.com/voisine/breadwallet/issues/157#issuecomment-76100984","issue_url":"https://api.github.com/repos/voisine/breadwallet/issues/157","id":76100984,"user":{"login":"throughnothing","id":61443,"avatar_url":"https://avatars.githubusercontent.com/u/61443?v=3","gravatar_id":"","url":"https://api.github.com/users/throughnothing","html_url":"https://github.com/throughnothing","followers_url":"https://api.github.com/users/throughnothing/followers","following_url":"https://api.github.com/users/throughnothing/following{/other_user}","gists_url":"https://api.github.com/users/throughnothing/gists{/gist_id}","starred_url":"https://api.github.com/users/throughnothing/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/throughnothing/subscriptions","organizations_url":"https://api.github.com/users/throughnothing/orgs","repos_url":"https://api.github.com/users/throughnothing/repos","events_url":"https://api.github.com/users/throughnothing/events{/privacy}","received_events_url":"https://api.github.com/users/throughnothing/received_events","type":"User","site_admin":false},"created_at":"2015-02-26T00:49:28Z","updated_at":"2015-02-26T00:49:28Z","body":"One argument for not having to type the pin in again if the app is already 'unlocked', is that for in person transactions, when you're scanning someone's qrcode from their phone/tablet, you may unlock the wallet first, to avoid having to type the pin in again with them watching or close.  Then when it asks again, you risk others seeing you type it in while you're trying to complete a transaction."}}