[whoopsie]

This is basically a branding and broader application of the existing Keychain access control presence requirement, whose documentation specifically calls out these scenarios. All finance apps should be using presence verification post login and preceding an outgoing transaction or possible takeover action.

[blokey]

No, it's way more than that.

It forces an hour delay for people using the device passcode to reset the Apple ID password EXCEPT if its in a known location like home (also blocks changing the device passcode and turning off FindMy), and forces FaceID for these, even if the phone has been forced to forget the FaceID keys and require the device passcode.

And it requires FaceID without a passcode ID fallback for certain categories of authentication.

[diffeomorphism]

> And it requires FaceID without a passcode ID fallback for certain categories of authentication.

Judging by how often finger print readers get false negatives, this seems like an incredibly bad and frustrating idea.

[KolmogorovComp]

That's why I always enlist at least a few of my fingers, even though I'm effectively always using the same on a day-to-day basis.

[shaunkoh]

I’ve had great experiences with faceID and touchID over the years, FWIW.

[jsjohnst]

Good thing Apple hasn’t used TouchID on phones in a long time then?

[sherry-sherry]

Yeah, except for ones they currently sell: https://www.apple.com/iphone-se/

[iAMkenough]

TouchID is far from "long time ago" tech. It's standard on Macs, and still present on iPhone and iPad models currently sold as new. Not to mention the large portion of their userbase that doesn't upgrade every three to five years.