Problem
Phone lock-screen notifications reveal security prompts to anyone with temporary physical access.
Solution
Root Cause / Diagnostic:
Default smartphone notification settings display full message previews on the lock screen, including Google verification prompts, 2FA codes, and password reset links. An untrusted party in a shared studio or public environment can observe or interact with verification prompts without unlocking the device.
Actionable Fix:
1. Hide Sensitive Lock-Screen Notifications: On iOS, navigate to Settings > Notifications > Show Previews and select "When Unlocked"; on Android, select "Hide sensitive content" under Lock Screen notifications.
2. Disable Notification Center Access: Disable access to the Notification Center and Control Center while the device is locked.
3. Physical Verification Check: Send a test 2FA prompt to verify that the locked screen displays only generic notification alerts without revealing verification numbers or approval buttons.
Pro Tip:
Configure your phone so notification details stay hidden until Face ID scans your face. Otherwise, anyone sitting next to your phone on a studio desk can read your 2FA verification codes right off the lock screen.
Default smartphone notification settings display full message previews on the lock screen, including Google verification prompts, 2FA codes, and password reset links. An untrusted party in a shared studio or public environment can observe or interact with verification prompts without unlocking the device.
Actionable Fix:
1. Hide Sensitive Lock-Screen Notifications: On iOS, navigate to Settings > Notifications > Show Previews and select "When Unlocked"; on Android, select "Hide sensitive content" under Lock Screen notifications.
2. Disable Notification Center Access: Disable access to the Notification Center and Control Center while the device is locked.
3. Physical Verification Check: Send a test 2FA prompt to verify that the locked screen displays only generic notification alerts without revealing verification numbers or approval buttons.
Pro Tip:
Configure your phone so notification details stay hidden until Face ID scans your face. Otherwise, anyone sitting next to your phone on a studio desk can read your 2FA verification codes right off the lock screen.