If my bank locked me out that often due to my phone OS, I'd switch banks.
this post was submitted on 30 Oct 2025
38 points (100.0% liked)
Privacy
43957 readers
730 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 6 years ago
MODERATORS
I think what most of us do is not use a bank that requires using a fucking app to access.
That's impossible in the EU, they all do by law.
Ah good ol' EU once again contributing to the Apple/Google duopoly.
They aren't forced to lock them down, or prescribe any app store afaik. That's the banks that do. Some lock it down, some not at all. But you'll need some form of 2 factor "photoTAN" app. Unfortunately, common 2fa codes aren't used (or allowed), I think this legislation is actually older than them becoming common.
And that's quite all, they also offer hardware token generators. Not sure if they are required to, but i think so. You do have to pay for them once (20 or 30 bucks maybe?). In reality, this is somewhat impractical for a variety of reasons...
They aren't forced to...prescribe any app store afaik.
The app store ain't the problem, it's the apps themselves (and most likely Play Integrity shenanigans)
Unfortunately, common 2fa codes aren't used (or allowed), I think this legislation is actually older than them becoming common.
Those hardware generators you mentioned have been around for at least 30 years. A TOTP app is just software that does the same thing as those hardware generators.
Those hardware generators you mentioned have been around for at least 30 years. A TOTP app is just software that does the same thing as those hardware generators.
I'm aware, but you're not getting the secret token that you'd need to put into your TOTP app. At least not that I know of. I also haven't checked in a very long time if there are open source reimplementations of the photoTAN apps. They all got their own flavors, but it's also just a slight variation on a theme (initialize app with qr-like secret, then scan a similar code as a challenge/response using that secret to generate token). Probably should check that at some point.
Damn, if you're not joking, my day is ruined.
could you be more explicit? not that I do not trust you but I'd like to know more.
See my reply in this thread to artyom, I assume that's what you're looking for?
A patch was already released for this issue, fortunately: https://grapheneos.org/releases#2025102800
You should switch banks to a bank that already has a web application and doesn't require you to use a mobile application to make purchases.
Double agree
Do you have the exploit compatibility mode enabled in the settings? Under Apps > [Your Banking App]
^^have you tried this? I needed to enable for my banking app to work.
The cheap secondary phone is the approach I have gone with for work apps. Powered up only when needed and doesn't connect to my main home network.
In ur working profile u installed google play service using graphene os appstrore and u installed it using play market .So does it happen inside container? Cause for now in container even revolut working without problem
Yeah, I have a secondary user profile with google play services and google play and installed the banking app from there. My main user profile has no google at all, it's the default GrapheneOS profile (haven't really tweaked it much).
Hmm I think the best answer possible to get from grahene is forum from dev team about ur banking app.something triggering ur banking app and have to be spoofed
If I'm you I'm changing banks, the problem is likely to return and just get worse.
As alternative suggestion:
Switch Banks (Move to a Local Credit Union or at least a better one)