About this app
TimedLock improves security for your Android device by disabling fingerprint unlocking if the device has not been used for a while. This is useful if you like the convenience of fingerprint unlocking, but still want the security of a PIN or password if your device falls into the wrong hands. In addition, you can improve security by setting a strong PIN or password because you won't have to enter it as often.
IMPORTANT NOTE ABOUT UNINSTALLING
To uninstall this app, you must tap Uninstall in the app's menu. The normal way won't work because this app is set up to be a device administrator for your device. TimedLock requests permission be a device administrator so it can control how the screen locks.
Why do I have to make TimeLock a device administrator?
This app uses the Device Administrator permission. Only apps that are activated as device administrators can control how and when the device is locked. You must turn on device administration for TimedLock to require a passcode instead of a fingerprint.
What special access do device administrator apps have? Is it safe?
Apps that are activated as device administrators have special permission to control various things related to security. Each device administrator app only has permission to do the things that it asks for up front. When you activate device administration for TimedLock, it asks for the "Lock the screen" permission and that is the only thing Android will allow it to do. TimedLock does not have permission or the ability to do anything else, like use the network or monitor your activity.
Isn't using my fingerprint secure?
A fingerprint is not as secure as a PIN or password. Anyone with physical access to your device can get your fingerprint from the screen and use it to "print" a copy of your finger to unlock your device.
Android will allow an attacker to try to unlock using fingerprint an unlimited number of times and continue to do so for an unlimited period of time. After 5 failed attempts, Android will prevent more attempts for 30 seconds, but this may be repeated any number of times. TimedLock makes your device more secure by disabling fingerprint unlocking after a period of time.
If it's so insecure, why not just disable fingerprint unlocking altogether?
If you keep sensitive data on your device or your device can access sensitive data, you probably should turn off fingerprint unlocking completely. If you are a normal user with normal data, fingerprint unlocking may be good enough and the convenience may be worth the security risk. If you do use fingerprint unlocking, TimedLock makes it more secure since an attacker has a limited amount of time to unlock using a fingerprint. One advantage of fingerprint unlocking is that you can use a more secure PIN or password without having to enter it very often.
Does TimedLock limit the number of attempts to unlock with a fingerprint?
No. Android does not report when a failed fingerprint attempt occurs, so TimeLock has no way to monitor the number of failed attempts.
Does TimedLock run in the background all the time?
No. When you unlock your device, Android starts a tiny component provided by TimedLock. This component quickly schedules a time to require a passcode then stops running and can be freed from memory. After that, TimedLock does not run until the next time you unlock your device.
Why does TimedLock measure the time delay after I unlock the device and not the last time I use it?
This is just another layer of security. If an attacker gets access to your device when it is unlocked, TimedLock limits the amount of time they can use the device. If the device is still unlocked when the delay period expires, TimeLock will immediately lock the device and require a PIN or password.
