Request option for a different log in PIN to phone pin

I asked here

whether it was possible to have a different Monzo app login PIN that is different to my Android phone’s PIN. The answer appears to be no.

I can’t always use biometrics, and for those occasions it is much easier for me to use the PIN to both sign in to my phone and Monzo.

My request is to have the option to set the Monzo app PIN to something unique.

Ta
N

E: corrected link

This may help you to change your pin

Your Monzo pin is for any transactions that need verification or using your physical card and the app.

If you want to change your phones pin this will be done on your devices settings

This is not what they’re asking for @Ashton

They want to use a different pin for their Monzo App, vs their Phone, vs their Card Pin. :melting_face:

2 Likes

@AlanDoe

3 Likes

I also would still feel a lot safer if this was an option.

The most anyone can do is view your balance. They can’t do anything with your money without your card PIN.

Yeah but they would FEEL safer.

4 Likes

Someone will be able to see all transactions, and this could be used maliciously.

2 Likes

Just change one of the pins? My phone and banking apps both have separate pins

Maliciously in what way? assuming they’re transactions you don’t want people to see you could try hiding the app in a folder but for someone to see/open the app they’ll need to unlock your device

I don’t think hiding the app is the way forward. If someone has recovered the phone’s PIN then they would likely have access to text messages, emails, Monzo transaction data, and could use the phone to make calls to those making regular payments into the account.

This scenario is very unlikely. Surely you use biometrics to access your phone, the PIN should be a fall back or used when booting up from cold. How are people getting your PIN?

1 Like

If said someone had access to your texts/emails they’ll be able to bypass most 2FA with most companies anyway.
I would think if they’ve put in so much effort to do this the last thing they’ll try to do is look at your transactions just to phone your contacts.

If they’ve gotten your mobile pin to the phone it self, they’ll be allowed to make mobile payments such as Apple Pay / GPay etc for all the cards on the device without even touching the apps.

You can add extra security on Monzo savings such as a QR Code or friends to verify its you.

  • The best way forward is to make your phones pin more complicated and don’t inform anyone to what the pin is or could be and always use biometrics when possible

I read an article today about someone whose phone was snatched whilst unlocked which seems to be on the rise.

They managed to bypass the security on the Monzo app as they had access to emails and also change account passwords and biometrics. This meant they could send payments out of the account.

At this point they weren’t aware of the added security feature which probably would have helped.

Monzo did refund them in the end but I guess don’t just take for granted your current security methods will stop everything.

I’m not trying to dismiss your argument; I’m just curious about why biometrics can’t always be used?

This seems to address issues like phone snatching, since a thief can’t replicate your face or fingerprint.

Don’t believe everything you read on the internet.

They would need the PIN to transfer money regardless of whether the phone is unlocked. You also can’t change the PIN on the phone without knowing what the original PIN is.

No amount of email access can get around this.

I had been wondering how they managed to gain access to everything as like you say you can’t change Face ID without the pin.

You don’t need the pin if FaceID is set as the authentication.

It was a work colleague who’d posted the story internally. Could ask more questions but mindful of not causing issues at the same time.

I doubt they stole the victims face.

Banking apps should obviously be secure but email is completely overlooked.

If their phone is like my Huaweii, a blummin’ faulty fingerprint reader that the manufacturer cannot fix correctly :rage:
(hence I no longer use that phone)

1 Like

There’s a bunch of reasons I can think of. Fingerprint sensors can be hacked. Updates can stop them working. But for myself, ointment and I sometimes need to wear gloves to keep it in place. I also have a preference for long unique PINs for apps containing sensitive information, such as the other banking and email apps I have on my phone.