Reset password entered on Apple IOS devices (v9.5.2 client)

Per Eriksson4 days ago

Hi

By mistake I entered a password I don't remember during the setup of the client app on a IOS device. Un-installing the app and wiping the app configuration during that process seems to not do what is needed because when i re-install the app it remembers the password.
It can't be that I have to wipe the entire phone to be able to get rid of that password....

BR
Per

Anton Tananaev4 days ago

There will be an option to reset it using a command in the future.

Track-trace4 days ago

When you use the weburl to reset the the account password, that doesnt work for you?

Anton Tananaev4 days ago

Track-trace this is about the Traccar Client app.

Per Eriksson4 days ago

Its the IOS app that you now can put a password to access the setting on that I can't reset. Currently when you forget that password you can't remove it with the normal app uninstall with "remove settings" as it still remembers the password after uninstall/install on IOS.

Track-trace3 days ago

Ok i see, on ios apps i use face recognition for apps that i want to protect from others editing it. And also use the hide app function so it only can accesed / be opened with my fingerprint.

Anton Tananaev3 days ago

Using face id is kind of pointless in this case. We want to password protect from the user.

Track-trace3 days ago

Ok i see, if you give a user acces to the app, cant he then simply remove the app ? Actually i am in general only using Android.

Antony3 days ago

Honestly I think the password protection in it's current implementation is not as useful as it should be here is why, the reason why you want to password protect traccar in case of being an employer and you want to prevent your employee from turning off tracking or changing traccar settings so if you set the password they cannot change anything about the configurations but they can still see their device ID so if they really want to turn off tracking or change any configurations they will simply uninstall the traccar app from their device and reinstall it on a different device that they have full control over and just simply use the same device ID this way they can bypass the password protection altogether. In order for the password protection to reach its potential, the device ID has to be hidden if a password is set in traccar, this way a user can't get around the password protection on traccar.

Track-trace3 days ago

Or they could still disable gps or temporary remove app permissions, disable background services, disable battery usage, clear cache or switch off internet. Or just switch of the device (on my android phone the app did not start automaticly after reboot) If someone would not like to coorporate there seem to be plenty options to work against the app.

Antony3 days ago

True, if someone has physical access to a device and the will, then they absolutely can. But at least traccar should protect against leaking any info to the user to lock down traccar and prevent any unauthorized changes to the app if a password was set. What is beyond traccar's control isn't something Anton can mitigate. But hiding the device id when a password is set is a no brainer

Anton Tananaev2 days ago

There's no bulletproof solution, but uninstalling the app and installing a spoofed version on a different device seems like a pretty high bar.