wordpress-mobile/PasscodeLock-Android

Infinite failed PIN lock attempts

roundhill opened this issue · 1 comments

Originally reported at: Automattic/simplenote-android#427

Not sure if this is intended but failing to enter the correct PIN lock code allows you to keep trying an infinite (tested up to 34 on my end) number of times

Steps to reproduce:

Launch Simplenote.
Activate the PIN lock feature under Settings > Turn PIN lock On.
Add a 4 digit passcode, for instance 1234.
Close the app and relaunch.
Enter a wrong passcode.
Keep entering the wrong passcode.
What would I expect?
As you get stuck in the unlock screen and there's no message for the user on how to workaround that or access to their notes, I'd suggest a message after 3 failed attempts on the lines of

"Have you lost access to Simplenote? You can regain access by re-installing the app and logging into your account."
As reinstalling the app would request your email and password in order to log in, that should be alright and at the same time there's an effective way to get out of the loop of not being able to access to your account and not getting a message on how to solve that.

I noticed a similar issue on an app I'd been working on. Our workaround was to just extend the passcode activity, put in a countdown which once it reached zero would trigger some action.