Why call it a PIN and not a password to begin with? Is there a difference I'm missing?
Why call it a PIN and not a password to begin with? Is there a difference I'm missing?
For example a Yubico Security Key can use a PIN. So I could use that as second factor for my Facebook. No matter how lazy, incompetent or even malevolent Facebook is, they never see that PIN, they just get a bitflag in which the Security Key promises it confirmed my identity before authenticating. If they insisted and I allowed them to, they could verify it's a real Yubico brand product (in reality Facebook don't do that) and maybe trust the bitflag on that basis, but even then they aren't learning what PIN I set, how long it is, anything useful.
You probably don't want to store such PINs in a Password Manager, although it's unlikely to be a big security problem to do so, they are intended to be human memorable unlike a "good" modern password.
If it’s not user friendly, the user will defer to convenience over security. Signal PINs do support alphanumeric strings FYI.
If you have a password manager, use a string. If not, a PIN works just fine.
The whole PIN thing has changed quite a bit in the past 6 months or so.
No, only supporting data: "Your profile, settings, and contacts will restore when you reinstall Signal."