Hey everybody, do you know that linking all your security starting from unlocking your smartphone, outlook email (or any email used for resting passwords), UAE Pass & bank applications... etc just with fingerprint will keep your security in risk.
Duplicating fingerprint is not a big deal, possibility that someone use your fingerprint while you are sleeping on in bed in hospital also not a big deal.
Hence you must activate PIN code somewhere.
You may think that is easy, no, in fact UAE PASS opening door to your all accounts directly and no way to unlink your personal accounts with UAE PASS, even if you disable fingerprint option, it can be returned ON by just a click, or by reseting your passwords via outlook.
Then you may think the only solution is to keep outlook also in the secure folder to run a PIN code on top of the secure folder, that is true, but this will create another problem: YOU CANNOT SYNCH YOUR CONTACTS FROM OUTLOOK TO PHONE BY MOVING OUTLOOK APPLICATION TO THE SECURE FOLDER.
SO WHAT IS THE SOLUTION NOW??? (Android 16, ONEUI 8 )
Moreover, keeping outlook in secure folder raises another problem: push notification will not work unless disabling portion of the secure folder security.
Thank you for sharing your detailed feedback and concerns regarding device security, fingerprint usage, and Secure Folder behavior on Android 16 / One UI 8.
We understand your point that relying only on fingerprint authentication for unlocking the device, email access, UAE Pass, and banking applications may raise security concerns, especially in scenarios where biometric authentication could be misused. Your emphasis on using a PIN or password as an additional layer of security is valid.
Regarding your questions and observations:
Fingerprint authentication is designed for convenience, but for higher security, Samsung strongly recommends using a secure lock method such as a PIN, password, or pattern in addition to biometrics. This ensures that sensitive services remain protected even if biometric access is compromised.
UAE Pass and banking applications follow their own security frameworks, and enabling a device-level PIN or password is essential for maximum protection.
Using Secure Folder is an effective way to add an extra layer of PIN or password protection for sensitive apps such as Outlook. However, as you correctly mentioned, apps inside Secure Folder operate in an isolated environment.
Due to this isolation, some functions are limited by design, including contact synchronization between Secure Folder apps and the main phone profile.
Additionally, push notifications for apps inside Secure Folder may not work unless certain Secure Folder notification and background activity permissions are enabled. This is expected behavior to maintain the security boundary of Secure Folder.
Currently, there is no supported method to synchronize contacts from Outlook inside Secure Folder to the main phone contacts while keeping full Secure Folder protection enabled. This is a system-level limitation intended to protect user data.
Your feedback highlights an important balance between security and usability, and it has been noted for consideration in future improvements to One UI and Secure Folder functionality. We appreciate you taking the time to share this thoughtful and detailed input.
Thanks for reply. Maybe I didn't explain clearly what is the expected solution.
The solution request is to implement optional PIN passwords to Applications in personal folder. Outlook already having an application lock but unfortunately it is linked with biometrics fingerprint (not a PIN code alone), moreover this option App lock is sometime not appearing.
Locking applications in personal folder (non secure folder) with PIN/Password is the solution, and for more security I suggest to automatically delete and logout the application user account completely if the PIN code wrongly entered for several times continuously.
Thank you for your detailed clarification and for explaining your expectations more clearly.
We understand your request for an option to lock individual applications in the personal (non Secure Folder) profile using a dedicated PIN or password, independent from biometric authentication. Your point about having a stronger and more consistent application-level security method, especially for sensitive apps such as Outlook, UAE Pass, and banking apps, is valid.
At the moment, application locking in the main device profile is handled through system-level security and biometric integration, and some apps provide their own app-lock options. However, as you correctly observed, these options are often linked to biometrics and may not always present a standalone PIN-only mode. The behavior you described, including the app lock option sometimes not appearing, depends on how each application integrates with the system security framework.
Your suggestion to introduce an optional PIN or password lock for individual apps in the personal profile, along with protective measures such as automatic logout or data removal after multiple incorrect PIN attempts, is a valuable enhancement request. This would provide stronger protection without the limitations that come with Secure Folder isolation, such as restricted contact synchronization and notification behavior.
We have noted your feedback and feature request and it will be forwarded for review by the relevant development teams for consideration in future One UI and security feature updates.
Thank you for taking the time to share your ideas and for helping us improve the user experience.
