While logging into Fyers Web, the newly introduces PIN is visible whereas it should be in the hashed form while entering.
It may so happen that somebody is overlooking us while logging in, so he/she may be able to see the PIN which defeats the purpose of 2 Factor Authentication to some extent.
Seriously, the designer needs to be sacked.
I’ve seen another issue. While entering the pin on a phone, it doesn’t tab automatically and you need to tap each box to enter the pin. How, non-intuitive the UI is.
Zerodha is way ahead with their T-OTP login feature.
No, it is not happening for me. Try reinstalling the app or try in some other phone to know if this is a specific issue to your phone.
Bro, this is definitely not an individual’s work. These kinds of things are designed by a dedicated team, generally.
So, it’s better if they gather what’s the best practices being followed in the industry and then implement them.
Yes, they are lacking but I’m hopeful.
Looks like they implemented the change this weekend to hide the pin when it is entered.
It is happening for the browser version when used on phone. Now I’m not being able to enter the pin to login. The keyboard disappears. Anyway not trading any more with Fyers, so I’m not bothered.
Actually no. It gets hide with a split second delay after you type which is enough for snooping.
You’re right. It should be a dot throughout.