Hello, right now I open the InvestEngine andro app and I can enter either PIN or use Fingerprint to access it. It is very basic. I was planning to consolidate my finances into InvestEngine but I’m skeptical at the moment as the security measures could be improved.
I would like to see, in addition to PIN / Fingerprint, enable a 2nd (additional) method of authentication that can be toggled optionally, this way we could specify either:
- Extra password
- Extra memorable word characters
- TOTP token generated from open standards like Aegis authenticator
The workflow would be:
- Open the InvestEngine app
- Enter either PIN or use fingerprint
- Go through extra layer of security mentioned above
- Access to App granted
As mentioned above, this would be optional toggle, so only users that are interested in extra security could enable this, anyone else would be unaffected.
Thank you for your understanding.