Zopa Smart Saver

Rudyson

noh said:

Rudyson said:

k_man said:

Rudyson said:

Is there any way to log out of the app completely? I set it up this morning (already had a Zopa a'c with a 1year fix) and had to pick a 6 digit passcode. All I need to do to enter the app is enter that 6 digit passcode, which doesn't seem very secure, compared to a normal online log in which needs email + password + one time passcode sent by text.

Can I log out in a way that requires a full log in?

4 digit PINs are considered secure enough for bank cards.
The app will require full login after a number of failed PIN attempts.
The lock for your mobile device should do the same.

So 2 levels of security to get through, and access to the physical device.

I know, but that's not considered remotely secure enough for normal online access, it seems strange that it is for an app, especially as a phone is more easily lost or stolen than a PC

Zopa only allow transfers to and from nominated bank accounts which have to be verified before use.
This adds another layer of security.
If you lost your phone anyone finding it who knows your phone access code and your 6 digit Zopa PIN would only be able to transfer money to your own nominated accounts.

That's true. I'm not unduly worried, it just strikes me that if a certain level of security is required for online accounts, the same level should be needed for an app. Conversely, if a particular security level is ok for an app, it should also be sufficient for online.

k_man

Apps can include the specific hardware as part of security.
The first time you login, the full password in needed.
The device then effectively becomes part of the multi- factor solution. (Like the bank card in banking)

This is not possible at the same deep level of hardware integration with a browser on a PC etc.
There are also many different browsers, many versions and various extensions.
There is only one version of the app (well one for Android, one for IOS).
Finally most users would object to typing long passwords into every app, every time they login. PCs have keyboards that makes this much easier.
If users were forced to type in passwords everytime, the likelihood is that easy to type (on a mobile), or poor passwords, would be used.

A big part of any app security is the device itself. The lock on that should be sufficient to secure your data. If not, many other apps pose a potentially greater risk.

E.g. does your email app (the gateway to most account resets) require even a PIN, or does it go straight in, and allow a direct access to all email?

Rudyson

k_man said:

Apps can include the specific hardware as part of security.
The first time you login, the full password in needed.
The device then effectively becomes part of the multi- factor solution. (Like the bank card in banking)

This is not possible at the same deep level of hardware integration with a browser on a PC etc.
There are also many different browsers, many versions and various extensions.
There is only one version of the app (well one for Android, one for IOS).
Finally most users would object to typing long passwords into every app, every time they login. PCs have keyboards that makes this much easier.
If users were forced to type in passwords everytime, the likelihood is that easy to type (on a mobile), or poor passwords, would be used.

A big part of any app security is the device itself. The lock on that should be sufficient to secure your data. If not, many other apps pose a potentially greater risk.

E.g. does your email app (the gateway to most account resets) require even a PIN, or does it go straight in, and allow a direct access to all email?

I don't use an email app, I log in through the browser. I do have the gmail app, but rarely use that address, and it isn't set up to access any other email.

I agree with what you're saying, especially about people's reluctance to type in a long password, but for me personally, this is the reason I don't normally use banking apps, and why if possible I'd like to be able to do a full login to Zopa.

MichaelAP

I find to access the ZOPA App, Face ID as the first layer of protection is enough.

meantangent

Their help pages don't give an answer, what happens when you need to change phone or number?

meantangent

meantangent said:

Their help pages don't give an answer, what happens when you need to change phone or number?

Replying to myself, but, just realised my Android 11 phone is incompatible.

meantangent

This is odd, the google play store on my phone says the app is compatible, but the browser play store says it is not.

refluxer

meantangent said:

This is odd, the google play store on my phone says the app is compatible, but the browser play store says it is not.

Android 5 is the only minimum requirement listed and that was released in 2014 so I can't imagine compatibility will be an issue for most people. I haven't heard of a 64-bit requirement for the Zopa app either, unlike Chase.

meantangent

I have since found that the link on google search, while logged in to my google account, gives the no compatibility issue. But, the link from the Zopa site is compatible with my phone. And the phone itself shows as OK.

I assume the Zopa account allows you to install on more than one device.

noh

meantangent said:

I have since found that the link on google search, while logged in to my google account, gives the no compatibility issue. But, the link from the Zopa site is compatible with my phone. And the phone itself shows as OK.

I assume the Zopa account allows you to install on more than one device.

Yes. I have it installed on one android device and one iOS.