Dear bunq,
I would like ;) syncing and device-bound passkeys & configurable permissions.
#1
I would consider using a [syncing Passkey] to allow quick read-only access to my bunq accounts and switching of card to sub-account permissions.
This would may be on top of bunq pin but in stead of video authentication.
No payments possible in this mode.
(Variation: only internal payments possible.)
#2
I would like a [device-bound Passkey] to allow access to almost everything, but with a transfer amount limit X. Going over that limit would require video authentication.
This may be in stead of the bunq pin, but it must be in stead of video authentication (up to that set limit).
#3
Thirdly, I would also like a mandatory [device-bound Passkey] authentication when transferring large amounts above limit Y inside a session that was once authenticated by video.
So this is on top of the bunq pin and on top of video authentication.
(Fallback suggestion: another (more recent) video authentication.)
These desires might shift over time as implementation changes.
(For those who want to know: Syncing Passkey could be synced between iOS devices by iCloud or a Password manager. A device-bound Passkey cannot be synced (or cloned) and is anchored to a specific device. Theoretically, it could be tied to a specific iPhone in a specific state. Practically, today (2023-12-11) it would be a NFC Security Key with a Passkey on it.
Syncing Passkey is currently accessed by biometrics or phone’s passcode.
Device-bound passkey on iPhone is theoretically accessed by biometrics but not by phone’s passcode fallback. (Design work to do here.)
Device-bound passkey on Security Key is currently accessed by PIN or biometric depending on key type. The NFC variant will require at least nfc-tap, pin, tap2.)
If you want to share. Which flow (1,2,3) would you like? And why?
My reasons are:
1: quick & fast limited access.
2: strong authenticated access as an limited alternative to being on camera.
3: peace of mind.
