Can Mate20 Pro Face ID Unlock Be Geolocked and/or Temporarily Disabled? - Huawei Mate 20 Pro Questions & Answers

Hi everyone, I'm a potential Mate20 Pro customer, but I need more information on the features:
1. Is it possible to temporarily disable the face unlock, similar to the iPhone X?
Here is how Apple implements mechanism to disable it: https://mic.com/articles/191653/heres-how-iphone-users-can-disable-face-id#.GFGUiwnJH
2. Is it possible to geolock Face Unlock, so it works in your own home, but is disabled in other places?
Thank you.

Anyone?

Not understanding why you'd do that. Probably just set screen lock delay in settings. I never had geolock

leo72793 said:
Not understanding why you'd do that. Probably just set screen lock delay in settings. I never had geolock
Click to expand...
Click to collapse
The reason is in the article I linked above: To protect yourself against anyone (such as a bad police officer) who might try to hold your phone up to your face to unlock without permission. Apple has a solution.
As for geolocks, some phones can already disable or downgrade their security when you are in a trusted zone. (My mom's old LG G4 from 2015 does this.) It would be nice to only allow face unlock in my own home or office.

oops double post

Bamboo-Toolkit said:
The reason is in the article I linked above: To protect yourself against anyone (such as a bad police officer) who might try to hold your phone up to your face to unlock without permission. Apple has a solution.
As for geolocks, some phones can already disable or downgrade their security when you are in a trusted zone. (My mom's old LG G4 from 2015 does this.) It would be nice to only allow face unlock in my own home or office.
Click to expand...
Click to collapse
well for the "geolock" id expect it to need location and or wifi access. which if off wont allow it to work. 2nd, what are you tryingh to hide from cops lol

Dunno about geo locking (that might need a 3rd party app) but there is an option to require the eyes to be open.
Might be useful for those people living in such Police states that may infringe on your civil and constitutional rights as you simply need to keep your eyes shut
Unless that is the LEO is carrying matchsticks
---------- Post added at 07:06 AM ---------- Previous post was at 06:09 AM ----------
Actually now that I've woken up, if someone is that paranoid they're worried about a LEO holding the phone to the face to unlock then maybe they should just disable face and fingerprint unlock all together and only use a PIN with a very short screen off time

With smart unlock you can tell the phone to unlock without code or anything at certain places (ie at Home). Outside of that place you would need your PIN or password (if you chose one of these options). At home you would have no security for unlocking but I think it's the closest thing to what you want (if you want to beef up your security for certain apps you can chose a pin or face unlock for every single app so nobody could use them even if they got hold of your phone at home).
Hope that helps

leo72793 said:
well for the "geolock" id expect it to need location and or wifi access. which if off wont allow it to work. 2nd, what are you tryingh to hide from cops lol
Click to expand...
Click to collapse
I'm just security-conscious.
Just because you're paranoid doesn't mean anyone is actually chasing you! :silly:
panman1964 said:
Might be useful for those people living in such Police states that may infringe on your civil and constitutional rights as you simply need to keep your eyes shut
[/COLOR]Actually now that I've woken up, if someone is that paranoid they're worried about a LEO holding the phone to the face to unlock then maybe they should just disable face and fingerprint unlock all together and only use a PIN with a very short screen off time
Click to expand...
Click to collapse
In China, the police can just arrest anyone and hold them forever until they give up their phone PW. That's police states for you!
Here in the Western world, PIN unlocks often have different legal protections than biometric unlocks, hence Apple's solution. But you do have a point about disabling Face / Fingerprint unlock.
AndiThebassman said:
With smart unlock you can tell the phone to unlock without code or anything at certain places (ie at Home). Outside of that place you would need your PIN or password (if you chose one of these options). At home you would have no security for unlocking but I think it's the closest thing to what you want (if you want to beef up your security for certain apps you can chose a pin or face unlock for every single app so nobody could use them even if they got hold of your phone at home).
Hope that helps
Click to expand...
Click to collapse
Thanks, this is helpful.

For Huawei go to secure lock settings and enable "Show lockdown button on power off screen", when you try to power off your phone there will be an extra option called lockdown when you select this your phone can only be unclocked by PIN (if you've set it)

Bamboo-Toolkit said:
I'm just security-conscious.
Just because you're paranoid doesn't mean anyone is actually chasing you! :silly:
In China, the police can just arrest anyone and hold them forever until they give up their phone PW. That's police states for you!
Here in the Western world, PIN unlocks often have different legal protections than biometric unlocks, hence Apple's solution. But you do have a point about disabling Face / Fingerprint unlock.
Thanks, this is helpful.
Click to expand...
Click to collapse
huawei offer privacy area in secuirty&privacy. use 2nd passoword enter privacy mode. told them your main password and hide your 2nd password. DO NOT BELIEVE IN MOVIES, YOU UNABLE TO RESIST TORTURE. this is right to protect yourself and your date. but in privacy mode use phone sim card 2. you keep sim card out.

Related

Phone Security

I'm looking for recommendations on phone security apps in case my phone gets lost or stolen. Free or paid, I really don't care, I just want to sleep better knowing that if my clumsy self loses the phone I won't be out of 200 dollars. Thanks!
Lookout has been good for me. Does backups, anti-virus (however unnecessary as it may be right now), and phone location. Used it since beta Win Mo days.
-bZj
_____
-sent from my Samsung Vibrant via XDApp
down8 said:
Lookout has been good for me. Does backups, anti-virus (however unnecessary as it may be right now), and phone location. Used it since beta Win Mo days.
-bZj
_____
-sent from my Samsung Vibrant via XDApp
Click to expand...
Click to collapse
Thanks for the help! I tried the app and it works out well. Everything works well on it. I had to do the GPS fix on my phone to test out the Locate Device function, and good thing I did too! I would've been so mad if I used lookout and then realize the GPS on my phone didn't work, lol. Again, thanks!
I'm a fan of Mobile Defense. You can install as a system app and it will be able to survive a wipe. The only way to remove it would be a flash. It won't show up in app manager either. It can remotely activate the GPS and will notify you automatically of a sim card change via email. It can also remotely lock the phone even if you don't normally use a lock pattern. It can also display messages on the screen that won't go away without entering a code. So you can have the screen have a message telling the person to return the phone and the message won't go away until the code is entered.
The only downside is that I think the beta program is closed to new people right now. I'm not sure as I joined a while ago.
I demoed Wave Secure and liked it so much that I bought the subscription for my G1 and my Mom's My Touch.
Check the features here.
https://www.wavesecure.com/wavesecure/android.aspx
Good Luck!
And I became really a fan of the recently introduced Track and Protect. It's a service that not only allows you to locate your phone on map, lock it, wipe it or let it scream via a personal web panel but also allows you to make photos remotely and send a call back command to listen to your own phone. All this works even after SIM change! It has auto lock function, it reports you the thief's phone number, operator ID and location instantly. Really useful.
MobiJohn said:
And I became really a fan of the recently introduced Track and Protect. It's a service that not only allows you to locate your phone on map, lock it, wipe it or let it scream via a personal web panel but also allows you to make photos remotely and send a call back command to listen to your own phone. All this works even after SIM change! It has auto lock function, it reports you the thief's phone number, operator ID and location instantly. Really useful.
Click to expand...
Click to collapse
Do you know any information on there "credit" method that they are using? It seems like a great service to use except that they don't tell you anything about these "credits" on the website without registering first.
Currently I use both Mobile Defense and Lookout. I always feel safe when I have more than one security app just in case. Although, Mobile Defense might also have a paid service in the future, similar to what Trust and Protect is doing. I wouldn't mind paying Mobile Defense since they allow us to install it as a system app, which a previous user explained upon.

[REQ] for developers - Finger Print lock Apps

Occasionally I leave my phone laying around or let other people play with it, but it's getting very tedious having to lock it all the time. Anyone up for creating a app that will let me lock certain portions/apps on the phone (ie. SMS, gallery, etc.) using the built in finger print scanner?
I will second this. I recall reading that Moto was going to release the APIs for the print scanner. That should make it considerably easier.
just a bump, I know all you great minds out there are capable of this and want this too =)
+1
+1 yes, yes, yes a needed app
Yes, yes, YES! I've been thinking about requesting something like this for a while now!
I emailed the developer of Widget Locker since he seems to be fiddling with the Finger Print Scanner on the Atrix to see if he's interested in making a separate app for this. I wouldn't mind paying something like $1 for it.
How can we get this thread more attention from developers on XDA?
Keep the thread bumped, add some other keywords such a biometric scanner, fingerprints, fingerprint scanner, etc. (I myself didn't find this when searching), post the same on other forums, that's all you can do really!
PiTT said:
I emailed the developer of Widget Locker since he seems to be fiddling with the Finger Print Scanner on the Atrix to see if he's interested in making a separate app for this.
Click to expand...
Click to collapse
And here I am! (Sorry for taking some time to get back to this)
What I'm doing from WidgetLocker is piggy backing on the system security, so I don't interface with the fingerprint scanner directly. However I have looked into this as it could be interesting for WidgetLocker to be able to use in more ways, and potentially another separate app like discussed here.
I've seen the other thread about the password keeper and this one about an app-lock type thing. The issue with a password keeper is that the passwords should be stored encrypted, otherwise if someone stole your phone they'd just need to root if (if it's not already) and they'd be able to get all your password. But encrypting the passwords with a key that's stored somewhere is really just adding a few extra steps, they're not truly protected. Normally they'd be encrypted with your password, and only decryptable with you typing the password again. But I don't think this could be done for the fingerprint scanner due to what information is available (And how the fingerprint information is stored on disk). I could be wrong however.
As for the app-locker thing, there are also security issues here, but I think app-lockers are more used as a deterrent than as real security. To lock out your friend rather than a thief. But there's a fair amount of non-fingerprint related work to be done for this kind of app as well.
If I do end up doing anything with it I'll post back.
I said this in the development section when it was released lol. So....+1 and good idea!
Atrix4G Rooted!
[email protected] said:
And here I am! (Sorry for taking some time to get back to this)
What I'm doing from WidgetLocker is piggy backing on the system security, so I don't interface with the fingerprint scanner directly. However I have looked into this as it could be interesting for WidgetLocker to be able to use in more ways, and potentially another separate app like discussed here.
I've seen the other thread about the password keeper and this one about an app-lock type thing. The issue with a password keeper is that the passwords should be stored encrypted, otherwise if someone stole your phone they'd just need to root if (if it's not already) and they'd be able to get all your password. But encrypting the passwords with a key that's stored somewhere is really just adding a few extra steps, they're not truly protected. Normally they'd be encrypted with your password, and only decryptable with you typing the password again. But I don't think this could be done for the fingerprint scanner due to what information is available (And how the fingerprint information is stored on disk). I could be wrong however.
As for the app-locker thing, there are also security issues here, but I think app-lockers are more used as a deterrent than as real security. To lock out your friend rather than a thief. But there's a fair amount of non-fingerprint related work to be done for this kind of app as well.
If I do end up doing anything with it I'll post back.
Click to expand...
Click to collapse
my reasoning behind this type of app as you said isn't for REAL security from a thief, more of a deterrent from people around me....such as a nosy friend or girlfriend =)
"such as a nosy"
Well, of course cell phones have had a way to prevent that for what, 20+ years now? You leave it locked, except for "emergency and speed dial" or other restricted calling. No reason that someone has to borrow my cell phone (and deprive me of my phone!) while they're doing whatever with it.
I don't have any guilt about saying "Sure, you can make a call. But I need my phone with me."
PiTT said:
my reasoning behind this type of app as you said isn't for REAL security from a thief, more of a deterrent from people around me....such as a nosy friend or girlfriend =)
Click to expand...
Click to collapse
Well, if you have a friend that would invade your privacy then they are not your friend. And if you have a girlfriend that doesn't trust you enough to respect your privacy then dump her. You can't have a relationship without trust.
There are already apps that let you lock particular applications. I hand my phone over to my 4-year-old all the time so she can play Fruit Ninja, so I keep my work email locked down. I guess it would be kind of cool if the app locking software took advantage of the Atrix's fingerprint scanner.
live4nyy said:
Well, if you have a friend that would invade your privacy then they are not your friend. And if you have a girlfriend that doesn't trust you enough to respect your privacy then dump her. You can't have a relationship without trust.
Click to expand...
Click to collapse
lol, I second this... She's obviously insecure.
And why are we assuming that it's the girlfriend that's untrustworthy? PiTT (no offense, all due respect) is the one with dirty little secrets on his phone.
aquariumdrinker said:
And why are we assuming that it's the girlfriend that's untrustworthy? PiTT (no offense, all due respect) is the one with dirty little secrets on his phone.
Click to expand...
Click to collapse
Thanks =)
you guys are missing the point, it was just an example. Now back to the topic at hand.
I would love to be able to lock my phone using the finger print swype. This can't be to hard, could it?
jange said:
I would love to be able to lock my phone using the finger print swype. This can't be to hard, could it?
Click to expand...
Click to collapse
I don't understand what you are asking here. If you're going to be swiping your finger over the sensor to lock it, wouldn't it be just as simple to just press the button? If you have the sensor lock enabled, it will be locked with access only being granted to your finger swipe.
GEESH!
Clearly some people on this thread don't understand what's going on here. So let me break it down....
It's not about "it's not a real friend if they invade your privacy".
It's not about "why not just lock the phone itself".
Maybe you have a family member, girlfriend, wife, or CHILD you want to be allowed to use your phone. This requires unlocking the phone itself.
Buuuut, you don't want them snooping in your email or for the dense folks who don't get it, you don't want a CHILD deleting your messages accidentally, replying inadvertently to a co-worker via email etc.
Or let's be real, you don't want your GF or wife to see the chic you've been bangin's nude photo in your phone.
So you want to FINGERPRINT LOCK specific apps, like TEXT, EMAIL, SKYPE, TANGO, FRING, ETC! That way your "guest" can use your phone, but can't use any other apps without your finger!
GEESH!
I'd really like to see phones with Windows-like login profiles. So I can have my profile, ADMIN, and my wife can have hers GUEST.
Anyway...I second/triple/quadruple the idea of a fingerprint reader app lock. Right now I use AppProtector, and I'm looking into a new app called simply LOCK or (App) Lock.
"Clearly some people on this thread don't understand what's going on here. So let me break it down....
........you don't want your GF or wife to see the chic you've been bangin's nude photo in your phone."
*grin* The premise of your post made me laugh hard.
On a real note, I think this kind of application would be awesome. I too use appprotector, and I used to use the fingerprint scanner, but it just became bothersome to use everytime I locked my phone and had to unlock it. I don't have anything to hide on my phone, but I do lock my "SU" folder that contains all of my root tools. I have a 12 yo at home, and she could very easily mess something up without knowing it. I think the idea of locking certains apps with the fingerprint scanner is a fantastic idea, and I'd be willing to pay a few bucks for it for sure.
Actually, a whole utility for the fingerprint scanner on the Atrix that allowed you to do multiple things with it would be great.
Like was posted previously, it would be nice to have guest accounts (for wife and child etc), and with a fingerprint swipe, they wouldn't even have to login..swipe and go.

[Q] No swipe to unlock after adding CA certificate

As the title says.
Upon adding CA certificate im asked to choose PIN for credential storage, which is ok, same thing as on my DHD.
But after that, im unable to use swipe for unlocking. I really really dont want to enter PIN, password or gesture every time im unlocking TFP, its so anoying.
If i clear credentials, swipe is again able to choose. But i really need that CA certificate to connect to wifi when im at work
Yep, functioning as designed.
Sent from my Transformer Prime TF201 using Tapatalk
Yeah, that is how everything is supposed to work. I get the same thing when I install my company's security certificate when I set up my work email on my Prime. I think the company can control it (ie: require a password or not) but from their point of view company security trumps your convenience
Generally, by installing the security cert, you are agree to give access to remote wipe and enhanced security. That's how it is for my Outlook exchange. If I go to the web mail for outlook, I can wipe my device remotely.
Any way to bypass it? Or i ll have to just wait for custom roms..
Rebkos said:
Any way to bypass it? Or i ll have to just wait for custom roms..
Click to expand...
Click to collapse
Bypassing it (with or without a rom) may leave you in an awkward position employment wise - depending on your employer.
Rebkos said:
Any way to bypass it? Or i ll have to just wait for custom roms..
Click to expand...
Click to collapse
Apparently you don't work in the IT Security department at your company.
Well, on my DHD i have the same certificate installed and im still using swipe to unlock
I dont know if my employer do or do not find this disturbing. I just know, that a guy from IT dept has DHD as well and he is doing it same way
Im just to lazy to use anything else to unlock my TFP than swipe and also my gf sometimes uses it at home and i dont want here to know my "secret" password, pin or gesture so what im doing now, is adding certificate everytime i arrive to work, and deleting it when im leaving, and well, thats stupid also, but what else i can do
try then app No Lock.
Thanks man. I would still prefer to have to swipe to unlock device. But no locksreen is still 100x better than entering pin, password or gesture.

Exchange Email Security Policy - (No Pin)

I've searched the board here and found a few threads about bypassing the security policy when corporate email requires a pin/password code unlock on your phone preventing you from customizing your lock screen. All of the threads I saw where made under forums for other devices and I'm curious if anyone may know if they will work for the Verizon Note II?
I have a corp email account I sync on my phone and it forces me to use a pin lock or password phrase for security. I would like to try and get around this limitation, does anyone have any suggestions?
I'm trying to figure out the same thing.
I couldnt find anything in the play store that would do it.
Sent from my SCH-I605 using Tapatalk 2
Enhanced email has the option
sent from my "Oh my God its huge" galaxy note 2
smalltownbird said:
Enhanced email has the option
sent from my "Oh my God its huge" galaxy note 2
Click to expand...
Click to collapse
I see it for $9.99 on the GooglePlay Store ... a little steep for a single option / enhancement.
Durzo.Blint said:
I've searched the board here and found a few threads about bypassing the security policy when corporate email requires a pin/password code unlock on your phone preventing you from customizing your lock screen. All of the threads I saw where made under forums for other devices and I'm curious if anyone may know if they will work for the Verizon Note II?
I have a corp email account I sync on my phone and it forces me to use a pin lock or password phrase for security. I would like to try and get around this limitation, does anyone have any suggestions?
Click to expand...
Click to collapse
As the office IT guy. We make you set that stuff for a reason! Be careful as this could be a violation of your corporate use policy.
Make sure and ask your IT department before circumventing this policy.
However I belive touchdown leta you leave this password on just the exchange data on your phone.
omnifox said:
As the office IT guy. We make you set that stuff for a reason! Be careful as this could be a violation of your corporate use policy.
Make sure and ask your IT department before circumventing this policy.
However I belive touchdown leta you leave this password on just the exchange data on your phone.
Click to expand...
Click to collapse
thanks for the help, but not only is Touchdown $19.99, according to their website the software will not bypass pin/password security.
Touchdown doesn't circumvent the policy but you only need to enter the pin when accessing anything synced to your device via the exchange service. Everything else is wide open. Personally, I prefer to have all my information locked down via a pin. Too much information accessible on these devices anymore and the minor inconvenience of entering a pin is a small price to pay IMHO
Durzo.Blint said:
I've searched the board here and found a few threads about bypassing the security policy when corporate email requires a pin/password code unlock on your phone preventing you from customizing your lock screen. All of the threads I saw where made under forums for other devices and I'm curious if anyone may know if they will work for the Verizon Note II?
I have a corp email account I sync on my phone and it forces me to use a pin lock or password phrase for security. I would like to try and get around this limitation, does anyone have any suggestions?
Click to expand...
Click to collapse
my corporate exchange admin said that i simply needed to use the pattern unlock screen function and that would be sufficient. i'm sure its a configuration option he did on the exchange server.
Durzo.Blint said:
I've searched the board here and found a few threads about bypassing the security policy when corporate email requires a pin/password code unlock on your phone preventing you from customizing your lock screen. All of the threads I saw where made under forums for other devices and I'm curious if anyone may know if they will work for the Verizon Note II?
I have a corp email account I sync on my phone and it forces me to use a pin lock or password phrase for security. I would like to try and get around this limitation, does anyone have any suggestions?
Click to expand...
Click to collapse
I rooted my Note 2 with "imnuts" deodexed version of the root method located here,
http://forum.xda-developers.com/showthread.php?t=2035404
Then I was able to follow these directions located here,
http://forum.xda-developers.com/showthread.php?t=1117452
This worked for what you are trying to do. Follow the directions and be sure and download the Java files that are pointed out and it will work just fine. It's real easy to do but make sure you FOLLOW the directions. I have used this method on my GS3 and it worked for it also.
Jetdr said:
I rooted my Note 2 with "imnuts" deodexed version of the root method located here,
http://forum.xda-developers.com/showthread.php?t=2035404
Then I was able to follow these directions located here,
http://forum.xda-developers.com/showthread.php?t=1117452
This worked for what you are trying to do. Follow the directions and be sure and download the Java files that are pointed out and it will work just fine. It's real easy to do but make sure you FOLLOW the directions. I have used this method on my GS3 and it worked for it also.
Click to expand...
Click to collapse
Thanks a million for this!! I will try this and report back my results. :good:
Or just use maildroid. Its free in the play store
Sent from my SCH-I605 using xda premium
As much as I would like to, I KNOW that my IT department would kick my @$$ if I did this. If your phone was lost/stolen, your exposing yourself to some serious issues if there is any sensitive info on your phone.
I just wish they would allow the pattern lock and not force the PIN method at my company.
I'm trying to setup a home VPN and I'm having the same issue. It's requiring I setup a security lock for my phone just to enter any VPN information.
Kind of frustrating because it's not a corporate network I'm connecting to, just my own personal home network. And there's no way for me to do it without some type of security lock. Very lame sauce.
DaRkL3AD3R said:
I'm trying to setup a home VPN and I'm having the same issue. It's requiring I setup a security lock for my phone just to enter any VPN information.
Kind of frustrating because it's not a corporate network I'm connecting to, just my own personal home network. And there's no way for me to do it without some type of security lock. Very lame sauce.
Click to expand...
Click to collapse
Yeah I agree here, really wish there was a way to disable that feature. I understand that they want to make the device secure when using passwords, but it should be our choice when using that security. The VPN security is annoying as hell for me. I end up removing the vpn when I'm done.
Being the "IT Guy" at my job, once corporate data touches a person's phone it becomes a liability. No matter how you look at it. YES the phone belongs to you but the Email belongs to the company.
We enforce the Pin on our Exchange Servers here and require any employee to sign a contract pretty much stating that they're going to comply with the rules and regulations.
Is it inconvenient for the user, "He'll yeah it is", you know how often I get cussed out? But the fact of the matter is that the company has to protect itself.
Before we put this policy in place, we had an employee that had an iPad he had email and other proprietary materials on it. No Pin and it was a 3G model. He reported the iPad missing 5 days later only because he was wondering why his emails in outlook would go from unread to read with out him doing anything. After investigating it came out about the iPad and we had to remotely wiped it.
Long story short a company can't take chances with its information so if it means inconveniencing it's employees a little to give them the convenience (oxymoron) of using a mobile device for accessing data....then so be it.
Sent from my SCH-I605 using Tapatalk 2
Is this exchange email security policy a verizon specific requirement? I just switched from sprint and never had to agree to any permissions that alowed my phone to factory reset without my input before. I was on HTC before but now samsung. Ditto a coworker who is now on motorola and gets the same excessive permissions to setup work email. So many limitations and restrictions since the switch that I would think about going back to Sprint
Sent from my SCH-I605 using xda premium
Please read forum rules before posting
Questions go in Q&A
Thread moved
Thank you for your cooperation
Friendly Neighborhood Moderator

App Request: Fingerprint Lock

I looked for a request section but didn't find one. So sorry if this is in the wrong place.
What I'm imagining is having the ability to register one or more fingerprints to unlock the device, and another fingerprint to lock the device and ask for a password. For example, I could use my thumb to unlock the device and my other thumb to lock the device and ask for a password.
I'm someone who is pretty concerned with security and privacy so the first time I thought of this was when I heard of a case in Virginia where the court ruled that police can force you to unlock you phone using the fingerprint scanner but can't force you to give up a password. I suppose it could have other uses too but that's the main idea.

Categories

Resources