TANDEM APP SECURITY CONCERN

refluxer

vernon said:

I, for one, am not worried about security on the Tandem app, but where do I find Settings? I have tapped away like a demented woodpecker and still can't access Settings! I am using the Android version of the app. Many thanks.

You can get to 'Your accounts & settings' by clicking the head and shoulders profile icon in the top left corner.

km1500

One option is if you have a Samsung phone, and if that phone comes with 'secure folder' (eg Galaxy series) then install you banking apps in that folder

Barclays is the only bank I have come across that disallows this.

vernon

refluxer said ' You can get to 'Your accounts & settings' by clicking the head and shoulders profile icon in the top left corner.'
Thank you. I have tried clicking on that, no good. All I want to do is make my account visible to me. I accidentally clicked on 'make account invisible'! A small matter but irritating.

refluxer

vernon said:

Thank you. I have tried clicking on that, no good. All I want to do is make my account visible to me. I accidentally clicked on 'make account invisible'! A small matter but irritating.

I can't see an option to make the Instant Saver invisible and I'm not sure why they would have an option like that ?

There is an option to hide your connected account(s) though, which is to do with Open Banking and whether you want your connected account balance (etc) visible in the Tandem app. To show or hide those, you need to go to the Connected Accounts section in the settings.

foshank

km1500 said:

One option is if you have a Samsung phone, and if that phone comes with 'secure folder' (eg Galaxy series) then install you banking apps in that folder

Barclays is the only bank I have come across that disallows this.

I have a Galaxy A22 5G phone. But there is no secure folder available on this model. I also tried to set up a sim lock but when I try to add I have to input existing code. Network (O2) default codes were not accepted. I was on Virgin but recently automatically transferred to O2 via their partnership agreement. Perhaps that want Virgin default code which I don't know. Worried to try because if wrong again I will be locked out!

masonic

foshank said:

km1500 said:

One option is if you have a Samsung phone, and if that phone comes with 'secure folder' (eg Galaxy series) then install you banking apps in that folder

Barclays is the only bank I have come across that disallows this.

I have a Galaxy A22 5G phone. But there is no secure folder available on this model. I also tried to set up a sim lock but when I try to add I have to input existing code. Network (O2) default codes were not accepted. I was on Virgin but recently automatically transferred to O2 via their partnership agreement. Perhaps that want Virgin default code which I don't know. Worried to try because if wrong again I will be locked out!

Supposedly 7890, but if you don't have your PUK code and you've already tried twice it would be unwise to risk the SIM being locked. Might be worth getting a replacement SIM from O2.

refluxer

foshank said:

km1500 said:

One option is if you have a Samsung phone, and if that phone comes with 'secure folder' (eg Galaxy series) then install you banking apps in that folder

Barclays is the only bank I have come across that disallows this.

I have a Galaxy A22 5G phone. But there is no secure folder available on this model. I also tried to set up a sim lock but when I try to add I have to input existing code. Network (O2) default codes were not accepted. I was on Virgin but recently automatically transferred to O2 via their partnership agreement. Perhaps that want Virgin default code which I don't know. Worried to try because if wrong again I will be locked out!

I've got a different phone, but exactly the same problem - ex-Virgin Mobile customer unsure of what default code to use in order to set a new one. As the SIM was originally supplied by Virgin, I'm guessing it'll be the default Virgin code we need but I've already used up one attempt (by mistakenly thinking it was one I'd previously set myself) so could do with some official confirmation before trying again.

refluxer

A far bigger problem for me than any SIM lock issues though, is that my Tandem app sometimes opens without the need for a fingerprint, which is obviously pretty concerning.

I'm currently unsure of what exact circumstances lead to this due to to the numerous ways a phone can be used (swiping or not swiping the app away to properly close it when you've finished, the screen timing out while the app is open on-screen or still running via a background tab, manually turning the phone off etc) so I think I need to trouble-shoot this with different combinations of the above to find out what causes it ASAP. 

As far as I'm concerned, someone grabbing the unlocked phone out of my hand shouldn't be able to open the Tandem app (if it isn't already open) without needing some additional authentication, right ?

masonic

refluxer said:

A far bigger problem for me than any SIM lock issues though, is that my Tandem app sometimes opens without the need for a fingerprint, which is obviously pretty concerning.

I'm currently unsure of what exact circumstances lead to this due to to the numerous ways a phone can be used (swiping or not swiping the app away to properly close it when you've finished, the screen timing out while the app is open on-screen or still running via a background tab, manually turning the phone off etc) so I think I need to trouble-shoot this with different combinations of the above to find out what causes it ASAP. 

As far as I'm concerned, someone grabbing the unlocked phone out of my hand shouldn't be able to open the Tandem app (if it isn't already open) without needing some additional authentication, right ?

Yes, I've seen that too, neither Tandem nor Chip have any effective security themselves - they rely on your linked bank's open banking authentication primarily.

Anyone who grabs your unlocked phone can use it to find your phone number, and use your phone number to log in. You can improve the security by using a different device than the one you use for phone service.

Zaul22

Yeh Chip is the same. If it fails to recognise your face you click try again and it just opens anyway even if its not pointed at your face.