Arlo App for IOS will not forget my password

[GoalSecurity]

First off, I think this forum should have categories for the app, as issues can be about the app, only, so the Arlo model seems irrelevant.

My issue is I can't get the app to forget my password. I like to sign in using TouchID (which works fine), but I'm often presented with the login fields with the password pre-entered. Or I can always ask to login with password, and it is always pre-filled. So anyone using my phone can log in to Arlo, at any time (no need to know password or have my finger). I've never had this issue with another app. How do I get the app to stop auto-filling the password? Is this a known issue?

[steve_t]

At some stage, you probably ticked the box that says "remember me"

Try deleting the app, restarting your phone, installing the app. Log in again but don't check the box that says "Remember me"

Yours is probably quite a rare situation. Anyone using my phone is either trusted by me or they can't get into the phone in the first place. I don't have any security on running the app on my phone because I already need to unlock the phone to run the app. Why would someone else be using your phone that you don't trust enough to open your Arlo app? Do you have additional security on your emails, SMS, facebook etc?

[GoalSecurity]

Yes, I think I did click the remember me box at some point. And yes, there's probably no real reason to be concerned, since my device is normally locked, and there's plenty of higher-value targets on my phone than accessing my Arlo.

I guess my feeling was more that the app's behavoir seemed unlike most. Just strange that it will ask for my fingerprint, but if I don't provide it, the memorized login credentials will let me (or anyone) in regardless. Most apps would allow you to back out of the memorize password w/o having to delete the app and reinstall. So perhaps this is more of a bug report (or weird UI report). It's not a huge concern, but as I really am quite happy with the performance of the hardware and app so far, this kinda sticks out as something that could be fixed or refined.

[steve_t]

I wonder if it's a phone function as opposed to the app itself. You might find if you remove the app, restart your phone, reinstall the app, that it doesn't remember your credentials any more

[GoalSecurity]

I accept that reinstalling will probably reset the memorized password (I haven't had the time and motivation to try), but based on behavior of other apps, my sense is this is more about the Arlo app than the phone OS.

[jguerdat]

Based on the Android app,  a reinstall will force you to log in using a password and then you can configure fingerprint. The password can't be un-remembered.

[steve_t]

---

jguerdat wrote:

Based on the Android app,  a reinstall will force you to log in using a password and then you can configure fingerprint. The password can't be un-remembered.

---

But as long as you don't check the box saying "remember me" or whatever, it shouldn't remember them, yeah?

[jguerdat]

Maybe the iOS app is different but the only "Remember Me" I see is for the web browser.

[steve_t]

---

jguerdat wrote:

Maybe the iOS app is different but the only "Remember Me" I see is for the web browser.

---

I'm on Android but I can't remember. I'm pretty sure I had a remember me on Android but checked that box because I wanted my phone to auto login every time since I shouldn't need the additional security given that I have to unlock my phone in the first place

[GoalSecurity]

Yep, it's on the iOS app. Guess I should have mentioned it.

[GoalSecurity]

I basicaly agree. But still the app behavior in terms of logging in just feels odd in this regard. If the app is truly saving the PW, why does it also ask me to use Touch ID (Apple's fingerprinter reader) when I login? I can use Touch ID, or I can just say no, then it defaults to saved login. This is hardly a big issue, it's really me just saying to the Arlo developers that I think the iOS login process (maybe other platforms too) could be streamlined for new users who are figuring out PW login vs. saved PW login vs. the Touch ID login. I don't think a reinstall of the app should be required to disable saved PW or Touch ID. But hey, if this very minor thing (that probably bugs no one but me) is the biggest thing I can find to mention, the app seems pretty damn solid. But IMO, the more perfect you can make an app seem, the more trust users will have about solid code and security behind the scenes.