Hi, it would be great if the application would be more secure. 2 specific examples:
don’t allow the user to take screenshots of the application, except maybe for the coordinates tab.
protect the app with a sign in pin / password / whatever security the device provides you with. And logout at a time specified by the user. For instance the user can choose the app to automatically logout (or lock with the pin) as soon as the user puts Monzo in the background, or after 5 minutes that the app is idle.
2 reasons specifically , one less serious of the other.
1 - people might take your phone, screenshot stuff you don’t want them to screenshot of your details and send them somewhere unwanted.
2 - automation. Third party apps, malwares can crawl programmatically your phone and take screenshots. Not nice.
I really like the ability to take screenshots of my banking app, send photos of transactions to people, it’s only ever annoyed me when other banks block this on android. However on iOS i don’t think this is even possible.
If people have taken my phone, I’d be more worried about them exploiting it directly than faffing around with screenshots. They’d have to unlock my phone to take screenshots - but then by unlocking my phone they’d also have access to my email, which is a far greater concern. They could use that to reset my passwords, etc.
Again, if I ended up with malware, screenshots would be the least of my problems, as email would also be compromised. Also my understanding is this sort of malware is targeted - you’d have to social engineer the victims to download the suspect app in the first place - and Google are getting better at finding and blocking them.
tl;dr, in both situations you describe, screenshots are not actually the main vulnerability.
We actually had a discussion about this internally recently (when we were building Android fingerprint lock) and we felt that disallowing screenshots is a pretty terrible user experience.
For one thing, we even take screenshots ourselves within the company to load them into the app we use to claim expenses!
That’s why we made sure to build the toggle switch. If you don’t want Monzo to appear in your recent apps switcher, you can disable this (which also stops screenshots), and then if you need to take a screenshot you can toggle the switch, so it’s all in your control