Norton App Lock can be bypassed with Google Wallet. Serious issue

There's a serious issue with the Norton App Lock.

I'm using it to require password when opening some apps, but with the Google Pay (Google Wallet) the password prompt can be easily dismissed. All I need to do is switch tabs in the android system or simply close and open again and the app will be opened without password.

It is working properly with all other apps.

There is an issue with being able to bypass the the App Lock code using that method. But if you check the Keep locked setting before entering the code, and then you close and reopen the app you will be asked for the code again. And yes, with the current bug, you will be able to bypass it.  But if that option is unchecked, event if App Lock  is working correctly, you would be able to close and reopen the app again without any code, until you let the device go into standby.

My contact is passing this issue to the developers.

I'll let you know when I hear anything.

Yeah, but I mean without inputting the password. That’s how I can bypass it

It also happens if I simply close and reopen the app.

That is normal for the "Keep app locked in Session" setting unchecked. If you check that setting, you will be prompted for the App Lock code if you just close and reopen the app.

Yes, I'm referring to that. It's great than you could replicate the error.

It also happens if I simply close and reopen the app.

The option being unchecked would explain being able to close and then reopen the app. As I noted, that setting allows reopening apps until you allow the device to go into standby.

When you refer to switching tabs, are you referring to the recent apps listing? If so I have been able to duplicate what you are seeing. I tested against some other apps I have protected by App Lock and they all work as expected with the pass code being required. Only the Google Wallet  app does not ask for the code when tapped on from the recent app list.

I'll forward this post to my Norton contacts. Thanks for finding and reporting this.  

Yes, this option is unchecked.

Android 12

What device and Android version are you using?

Check if you have the "Keep app locked in Session" setting unchecked for that app. With that setting unchecked, you would not need to unlock the app again until you let the device go into standby.

 

app lock keep open in session.jpg