Entering PIN/Password at Lock Screen 8
by Adam Marks Thu, 09 Jun 2011 2:00 pm EDT
Setting a PIN or Password is a great way to restrict access to your device and is extremely easy to do in the "Screen & Lock" app, even setting how often the password is needed (from every time you turn on the screen to every 30 minutes). However, there are two factors that determine how many opportunities you have to enter in the password without additional safeguards being put into place: if this is the first unlock after a device reboot and your webOS version.
In addition, if you have a Corporate Exchange account loaded on your device, your IT department can set their own policies around password requirements and potential remifications of incorrect entries (thanks to bemjb in the comments for this info)
webOS 1.x
- Regardless if it's after a reboot or not, you have 4 tries to enter your PIN/Password. After 4 tries, the phone will lock up an not accept any more attempts for a short period of time. After 10-15 seconds, you can try again for four more times.
webOS 2.x
- Immediately after a reboot, you only have 3 tries to enter your PIN/Password. If a correct PIN/Password is not entered, your phone will be wiped clean (see screenshot above)
- Once the phone has been unlocked after a reboot, there are actually no restrictions. You have an infinite number of tries to gain access to your device.
0
0
1
0
8 Comments
3 tries and a wipe for 2.0? Wow.
Is there a patch available that disables lock when the device is on a Touchstone?
Indeed TERRIBLE !!!!!
There's one more factor: if you're getting corporate email/calendar from exchange, the server administrators can set this as policy. For example, when I have my work email configured on my Pre 2 (and it was the same with my Pixi Plus running 1.4.5), I must have a password or pin configured, and 8 wrong entries will cause a device wipe. This 8 wrong entries thing has nothing to do with if it's after a reboot or not. Admittedly, that's better than 3, but it's very unfortunate when your phone unlocks in your pocket.
thanks for the info. I updated the article accordingly
I see this from a consumer point of view so excuse my ignorance, but I see the "device wipe" ability to be potentially annoying. This easily could lead to a friend or co-worker who wants to prank you by knowingly entering 8 incorrect PINs so you come back with a empty device.
Really no use in the device wipe unless you store sensitive data on your USB partition which would be foolish with or without the device wipe.
My Pre + with 1.4.5 is 8 times. Three is a bit short only becasue of fat-fingering. But this is like most other password rules.
Got to love pin bypass patch. I hate entering pin my corporate email require this stupid pin or password so I just use the patch to by pass it. Thank homebrew.