Would be pretty nice if one could hide the user profiles, and just be presented with a login screen at the start.
Different PIN/fingerprint = log into different user.
Benefits:
- Privacy (People who pick up your phone can't see how many accounts you have and what they are named)
- Convenience: ( you don't have to manually go through the switching process each time you want to switch accounts.)
this could be an optional thing like the duress password - you don't have to use it, but if you enable it its there.
A nice implementation would probably be that you can turn on the "hidden" setting in a user profile, which makes it disappear from the user list, and you can only log in through the Owner's Pinpad. Reversible if you log into that user profile and change it back.
Some issues I thought of:
- storage (what if you forget that you made an account and store a bunch of data on it and can't delete it? Listing it in the Owner profile somewhere would defeat some of the privacy benefits of this suggestion )
- user error (trying to set multiple accounts with the same code to "hidden")
- codes within codes (example: Owner might have the password 1234, Hidden-User1 might have 123456. so if you have at least one hidden user the feature "Auto confirm Unlock" needs to be disabled, but then we have a new issue where someone can infer information about existing accounts by checking if this setting is blocked from being enabled)
This is just a small concept I came up with, what do y'all think?