Smartphone Users Urged to Replace 4-Digit PINs as Weak Passcodes Expose Passwords and Passkeys
Updated
Updated · MUO - MakeUseOf · Jun 15
Smartphone Users Urged to Replace 4-Digit PINs as Weak Passcodes Expose Passwords and Passkeys
3 articles · Updated · MUO - MakeUseOf · Jun 15
Summary
4-digit phone PINs can become the weakest link in mobile security, letting anyone who learns the code unlock stored passwords, passkeys and other sensitive data.
Built-in managers such as Apple Passwords and Google Password Manager often treat the device passcode as the fallback master key when Face ID or fingerprint login fails.
Passkeys avoid phishing by keeping private keys on the device, but that protection collapses if the phone itself is secured by a short, easily guessed or brute-forced code.
Longer 6-digit, 8-digit or alphanumeric passcodes add protection, and third-party password managers can create a second barrier with a separate master password.