An iPhone App is asking for my screen lock password - is it is a system interface or is it an impersonation?

HercMu11 Said:

"An iPhone App is asking for my screen lock password - is it is a system interface or is it an impersonation?: [...]I asked Apple support and the rep said: 'This looks like the normal passcode screen, but it's not exactly like it. Weird if the developer made it look the same.' Reporting it as a security vulnerability."

-------

👍

Consider Contacting the Developer too:

Thanks for doing your part in reporting this. It will help many for certain. I'm sure it will be looked into by Apple. Contacting the developer would be a great idea aswell. Perhaps it is a bug, on their end? Here is an example of finding a developer's contact info in the App Store. It would look like this on the right-right of the screen, scrolling down a little bit. I have highlighted what to click: Support

Screenshot:

HercMu11 Said:

"An iPhone App is asking for my screen lock password - is it is a system interface or is it an impersonation?: [...]I've used iPhones for years and no App has ever asked for my screen lock password. Now a Hong Kong government App (soon to be in mandatory use by nearly everyone) is asking, and while it visually looks like the screen lock interface, it seems more like it is a within-app, non-iOS interface.[...]"

-------

Contacting Local Government:

Report this to you local government, and ask them to verify if this is official. If you know someone in the movement (i.e. a counsellor), have them look into this app. I would keep off of it, until local government verifies of this app. Though, all assumptions on my part.

HercMu11 Said:

"The App is from the Hong Kong government. The question is not whether the Hong Kong government (the developer) is trustworthy* but whether entering the screen lock passcode gives it to the government. *debatable"

-------

Ask the Developer:

If this is found in the App Store, then view the developer, and see who it is. Contact them from the site of the App.

HercMu11 Said:

"The App is from the Hong Kong government. The question is not whether the Hong Kong government (the developer) is trustworthy* but whether entering the screen lock passcode gives it to the government. *debatable"

-------

Ask Apple Support:

It is an app that Apple licenses with its Developer. So, ask Apple, when it comes to licensing concerns. They'd have the answer upfront.