Joe Maring / Android Authority
TL;DR Identity Check offers an extra layer of protection when someone steals both your phone and your PIN.
By requiring biometrics, Identity Check attempts to limit the harm bad actors could do.
Google is working to let you bypass that biometric requirement when your device is connected to a trusted smartwatch.
We all want our devices to be secure, but practical considerations mean we’re often striking a balance between security and convenience. That’s not a bad thing at all, as we don’t always need to be taking advantage of every security protection available to us, and systems like Android’s Identity Check are built for just this reason, letting us get away with just using a PIN or biometrics when we’re at home, but beefing up security and insisting on both when outside a trusted location.
Just last week, we looked at one way Identity Check could soon be changing, with the tool evolving to recognizing the presence of your connected smartwatch. At the time it wasn’t yet clear exactly how the watch would alter Identity Check’s behavior, but now it’s starting to come into focus.
⚠️ An APK teardown helps predict features that may arrive on a service in the future based on work-in-progress code. However, it is possible that such predicted features may not make it to a public release.
Identity Check is designed to help save your bacon when you’re in just about the worst situation: someone else not only has your phone, but they also have your PIN. Maybe they shoulder-surfed while you were unlocking the phone, or used threats to get you to reveal it, but Identity Check is built to assume that your PIN’s been compromised. That’s exactly why it also insists upon biometric authentication when trying to access saved passwords or change critical security settings from anywhere other than a trusted location.
Here are the strings we spotted last time we looked:
Code Copy Text
... continue reading