Able to switch profiles without unlocking phone

nandohyphen1

I am able to switch between profiles without unlocking my phone by clicking on a notification from it. I've been able to produce it many times. Here's a video of it. As you can see in the video, the phone is locked as indicated on the lockscreen.

https://drive.proton.me/urls/EZN5584YWM#q9V1jQwMclYk

DeletedUser433

nandohyphen1 Are both profiles locked with a password? Each password only applies to their respective profile

nandohyphen1

DeletedUser433 no, only owner has a password

DeletedUser433

nandohyphen1 You need a password for each profile, could you try again after setting it?

Probably9857

nandohyphen1 only owner has a password

Well, that is an important detail! I would say this is working as intended.

Profiles were originally intended for different people to use the same device. It wouldn't make any sense for the owner to unlock their profile just so another user could access theirs.

nandohyphen1

DeletedUser433 after setting a pin it didn't work to just open it by tapping the notification. I don't like to have a pin on all my profiles though so I think this would still be an important feature, not being able to access profiles without unlocking the owner profile first

DeletedUser433

nandohyphen1 Please lock your bank profile, there is another way to switch users (bottom right of the notification panel). You're leaving your bank apps exposed to thieves. Considering that setting a PIN is simple, it's unlikely that the devs will change this feature. In the original Android OS, it was also originally meant for multiple users rather than a single user who wants several profiles

Edit: Bottom right of the Quick Tiles panel

nandohyphen1

DeletedUser433 I usually keep a PIN on that one. I removed it to show the problem (then re set it) because the profile I first noticed this in (no PIN) has more apps (that I didn't want to film).

DeletedUser433

nandohyphen1 If you set different PINs for each profile, a thief/anyone who sees you unlock one of the profiles cannot access another profile because the PINs are different. If you had to unlock your Owner profile to access other profiles anyway, isn't it the same as just adding a PIN to your other profiles?

nandohyphen1

DeletedUser433 If you had to unlock your Owner profile to access other profiles anyway, isn't it the same as just adding a PIN to your other profiles?

Yes it is. I had never tried clicking on a notification for a different profile when my phone was locked (I don't even know why, I've had GOS for several months and never even tried it before :) ) so that is why it seemed to be a bit of a security alert.

@Probably9857

Well, that is an important detail! I would say this is working as intended.

I realized that now! ;) Thanks for help figuring it out @DeletedUser433 and @Probably9857

DeletedUser433

nandohyphen1 I had never tried clicking on a notification for a different profile

Yes, not to be naggy but please remember that there is another way to switch profiles! Only when your phone just restarted or powered up, will you be required to unlock the Owner profile in order to access all other profiles, you can try that yourself. Most of the time, profiles with no PIN can be accessed by anyone