Fingerprint leak - via apps above

[peter panner]

My son can get into my a40 phone without a fingerprint.
When he put on my phone, he is asked to use a fingerprint.
Then he opens the apps above, by swiping it down.
Via the QR-app he activate this app. Then he goes to the home button and he is in my phone.......
How is that possible?????

 

[Dannydet]

What apps above are you referring to?

 

[peter panner]

See picture

 

[Steven58]

I did a little research. This is what I found. Take a look at this link. On the bright side, your son's a genius. On the bad side, he's acting like a criminal.

 

[Hadron]

I wonder whether this is a Samsung bug, since I'd expect the system to ask for a password before opening an app or when you tried to leave the app (as phones with lockscreen shortcuts to the camera used to do). Certainly any attempt to access any app from my notifications brings up the PIN dialogue.

The obvious workaround is to edit your shortcuts and remove the QR scanner from them. And maybe let Samsung know that they've left a loophole.