Touch ID unlock when using fast app switcher

Liorbeit

Hello,
Note that it's easy to bypass the Touch ID or password:
1. Launch the app
2. Once prompted for Touch ID or password just double click the iPhone home button to get into multitasking mode
3. You're in !!!!

Liorbeit

Using iOS 9.3.1

AGKyle

Hi @Liorbeit

Thanks for writing in!

When you do this, I assume that you're being asked for Touch ID and when you tap the home button twice it then unlocks and goes to the app switcher. Correct?

What I think is happening is that between taps of the home button your finger is being read by the Touch ID sensor and sending 1Password the response that we should unlock. Sometimes that Touch ID sensor can be awfully quick and other times slower, definitely faster on those new 6S devices with the improved Touch ID sensors, too.

Can you confirm that you are seeing the Touch ID dialog and that you're using a registered finger for Touch ID? I'd be curious if you were able to do this with a finger that is not registered for Touch ID.

Liorbeit

I can confirm that it only works with a registered finger!
Using iPhone 6s.

AGKyle

Thanks for confirming, @Liorbeit !

I'll look into this a little more, but especially on those 6S and 6S+ devices, they improved the Touch ID sensor to be a lot faster, I forget the improvements they quoted but as I recall it was pretty substantial. So I'm really confident this is some sort of side effect of that. The fact it does not work this way with a fingerprint that is not registered means that it's not a bypass at all and more of Touch ID being fast and it playing tricks on our minds :)

That said, I am wondering if we're doing something funny that could be contributing to this appearing the way you had inquired about, maybe we can handle this better on our end to try to prevent it from looking like that. I'm not entirely sure though.

Thank you again for bringing this up though. :)

Is there anything else I can answer for you about this? I can certainly follow up with you if I learn anything in my research though, just let me know.

Liorbeit

Thanks.
I think you can indeed show it differently as it looks odd to the common eye.

Pilar

@Liorbeit, on behalf of AGKyle, you're welcome! We'll keep your suggestion in mind, please let us know if there's anything else that we can do for you :chuffed:

AGKyle

@Liorbeit

Unfortunately, this is probably not something we an alter. The Touch ID prompt is entirely Apple's code, we just ask that iOS show it. So, that whole overlay is not something we can control. What is happening is that when 1Password opens the Touch ID prompt is requested for display, while you are double tapping the finger print is being validated and then confirmed, before the end of the double tap for the app switcher we receive a response from iOS saying the finger print was accepted and we unlock. Then immediately after that the final tap on the home button shows the app switcher, which is also something we cannot control.

We can't prevent our app from allowing the app switcher as that's an OS level feature, so no way to override that. And we can't tell Touch ID to slow down either, so in both cases this is simply the way it has to work.

I'll keep digging but i don't believe we can do anything to make this better as all of the components involved are actually OS level features that we can't change in any meaningful way.