{"action":"closed","issue":{"url":"https://api.github.com/repos/bitpay/copay/issues/6058","repository_url":"https://api.github.com/repos/bitpay/copay","labels_url":"https://api.github.com/repos/bitpay/copay/issues/6058/labels{/name}","comments_url":"https://api.github.com/repos/bitpay/copay/issues/6058/comments","events_url":"https://api.github.com/repos/bitpay/copay/issues/6058/events","html_url":"https://github.com/bitpay/copay/issues/6058","id":229449797,"number":6058,"title":"Android Fingerprint \"Use Backup\" is broken","user":{"login":"dmo580","id":1091670,"avatar_url":"https://avatars0.githubusercontent.com/u/1091670?v=4","gravatar_id":"","url":"https://api.github.com/users/dmo580","html_url":"https://github.com/dmo580","followers_url":"https://api.github.com/users/dmo580/followers","following_url":"https://api.github.com/users/dmo580/following{/other_user}","gists_url":"https://api.github.com/users/dmo580/gists{/gist_id}","starred_url":"https://api.github.com/users/dmo580/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dmo580/subscriptions","organizations_url":"https://api.github.com/users/dmo580/orgs","repos_url":"https://api.github.com/users/dmo580/repos","events_url":"https://api.github.com/users/dmo580/events{/privacy}","received_events_url":"https://api.github.com/users/dmo580/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":10,"created_at":"2017-05-17T18:39:15Z","updated_at":"2018-04-25T17:41:27Z","closed_at":"2018-04-25T17:41:26Z","author_association":"NONE","body":"My understanding is the \"Use Backup\" feature is supposed to use your Device Password. This is a bit confusing unless it's spelled out. For other apps that use the Fingerprint API like banking apps, etc. if you don't want to use your fingerprint, you're supposed to login the old fashioned way using your account password.\r\n\r\nWhat I think would make for a better user experience is that when you let a user setup fingerprint access, it's supposed to be linked to a passcode/PIN that is used to lock Copay. If the desire is not to confuse the user with yet another set of credentials, then it needs to be made clear that you're using your Android device passcode/PIN, in which you're introducing the user to another set of credentials that needs to be used for Copay anyway.\r\n\r\nI still think the usage of a dedicated Copay PIN/password makes more sense. And on that note this maybe brings up the whole issue of the spending password. Perhaps it's time to rethink how you want to use all these protections--spending password, Copay access password. Maybe those two should be the same thing? I'm thinking out loud here but maybe have a security tab that allows users to setup what kind of security they want for Copay, and if they're allowed to use a fingerprint in place of entering those passwords. And before I forget there's also a wallet backup password right? In terms of UI/UX you might want to sort this out so users don't need to think about 4 different passcodes."}}
{"actor":{"display_login":"gabrielbazan7"}}