I opened up the app after days of not using it and it let me in without any authentication. I could see my portfolio and was able to initiate trades, no problem!
All finance apps implement at least a device PIN, that is asked from the user after the app goes inactive. That is a bare minimum security measure!
Until this is implemented, i advise everyone to not use the mobile app!
Posted May 20, 2021, 6:27 AM UTC
You can turn on biometric security
Fingerprint not pin. Please not a pin.
Pin for peasants like me who have a phone that does not support it. But yeah, having both options would be great.
Can not reproduce that. if i log out i get asked for mail an passwort + the Auth token
If i close the app my fingerprint is required and after a certain ammount of time i need to log in via pw an auth again
Android or iOS?
I am on Android and I was able to just open the app. Which is what you are seeing. This is not going to stop me from using the app though as you need a pin or face to unlock my phone.
I would like to say that I also just opened the app after not using for days and it just opened and I was able to trade withdraw etc I find this super sketch
Yeah, but instead of pressuring BlockFi to fix their shit, people prefer to downvote any critical thread.
What a nice community.
Few weeks ago I logged into my account to look, then I explicitly logged out and my girlfriend went to log into her account right after on the same computer - she went to the home page, then clicked the login button, put in her email and password and then was logged into my account.
Tried to recreate it but couldn't.