diff options
Diffstat (limited to 'docs/USER_GUIDE.md')
| -rw-r--r-- | docs/USER_GUIDE.md | 11 |
1 files changed, 7 insertions, 4 deletions
diff --git a/docs/USER_GUIDE.md b/docs/USER_GUIDE.md index f4fe5f8..dd15901 100644 --- a/docs/USER_GUIDE.md +++ b/docs/USER_GUIDE.md @@ -41,7 +41,7 @@ In the Garmin Connect app: your watch, then **Connect IQ apps**, then **OTP Wall Each form has a **Result** field the watch writes back, and the watch shows the same lines on its **Settings results** screen (also in its menu). After a form is applied the watch turns its switch off and clears it, the secret field first. After a problem only the secret field is cleared, so you can correct the rest and send it again. Sending exactly the same form twice does nothing the second time. -Your phone may or may not show the cleared fields and the Result text before you reopen the settings page; that depends on Garmin Connect (see [SETTINGS_SPIKE.md](SETTINGS_SPIKE.md)). +Close and reopen the settings page on the phone to see the cleared fields and the Result text. Garmin Connect on Android shows them after reopening ([SETTINGS_SPIKE.md](SETTINGS_SPIKE.md)); changes reach an open app in about a second. ## Add an authenticator code @@ -112,11 +112,11 @@ Use the **Manage entry** form with the entry's **ID**: four characters such as ` ## The PIN and locked entries -- **Set PIN** in the watch menu creates it (4 to 10 digits; the watch warns below 6). You are also asked for one the first time an entry needs it. +- **Set PIN** in the watch menu creates it (exactly 4 digits; the 4th digit enters it, there is no OK key). A PIN set with version 0.8.0 or earlier still works once; the watch then asks you for a new 4-digit PIN. You are also asked for one the first time an entry needs it. - Entering the PIN unlocks all locked entries until the app locks again: when you leave the app, after the auto-lock time (option), or with **Lock now** in the menu. - **Wrong PINs:** after 5 wrong PINs the watch makes you wait, longer with each further mistake. With the option **Erase locked entries after 10 wrong PINs**, the tenth wrong PIN erases the locked entries (unlocked entries stay). - **Change PIN** keeps your entries. **Reset PIN**, for a forgotten PIN, erases the locked entries and lets you set a new PIN; there is no other way back into them. -- Locked entries are encrypted with a key that only your PIN opens. A short PIN can still be guessed by someone who copies the watch's storage, so choose 6 or more digits for anything important. +- Locked entries are encrypted with a key that only your PIN opens. A 4-digit PIN stops someone using your watch (wrong PINs make it wait, and it can erase the locked entries after 10), but it can be guessed in seconds by someone who copies the watch's storage to a computer. Keep that in mind for very sensitive accounts. ## Daily use on the watch @@ -172,12 +172,15 @@ OTP Wallet never exports your secrets: they only flow into the watch. Your backu - **Connect IQ limits** - No unlocking with the watch's own passcode; the app has its own PIN. - App settings only work with the Store version, which is why the app is a private beta rather than sideloaded. - - The phone may not show what the watch writes back (Result fields, cleared forms, the About catalog) until you reopen the settings. + - The phone shows what the watch writes back (Result fields, cleared forms, the About catalog) only after you reopen the settings. + - Garmin Connect refuses to save some special characters in a text field. `otpauth://` links work; whether Aegis JSON (which needs `"`, `{` and `}`) can be pasted is still being tested ([SETTINGS_SPIKE.md](SETTINGS_SPIKE.md#follow-up-for-test-c)). - **Import** - Encrypted Aegis exports can't be decrypted on a watch (it would need 32 MiB of memory); export unencrypted. - Google Authenticator export links aren't supported; mOTP and Yandex entries are skipped. - Icons and notes aren't imported. - Pasted text is limited to the eight import fields per sync, and a waiting import to 32 KB. +- **PIN** + - The PIN is fixed at 4 digits. It stops someone using your watch, but someone who copies the watch's storage to a computer can try all 10,000 PINs in seconds. - **Storage** - At most 150 entries and about 100 KB in total. - At most 16 phone changes can wait for the PIN at once. |