Unlocking Fitbit Pay stays unlocked

[Dave_Demase]

My Special Edition Versa will unlock and transmit via NFC my payment info just fine to a terminal. I have noticed, however, that it remains unlocked until the next power off/on. I haven't found a way to relock the Pay Platform without a power cycle. I will be very underwhelmed if this is the default operation for protecting my sensitive financial data. Looking for a better answer.

[JohnnyRow · Accepted solution]

There are 2 setting you can use in setting up Fitbit Pay.  You can read about them here:

How do I use the device lock on my Fitbit device?

For the setting that I use, and I think Fitbit recommends, you will have to re-enter your PIN anytime you take your Versa off, or at least once a day.  With the other setting, I believe you have to enter PIN when you actually use it.

I guess I've never used it twice in the same day, but having to re-enter PIN whenever take it off insures nobody else could use it even if you take it off and leave it laying around for someone to grab.

[Dave_Demase]

Thanks for the reply.

The Fitbit Pay module does indeed re-lock when it no longer senses a pulse or it is taken off in the mode "Enabled for Wallet only". I wasn't doing that in my use-case scenario. I was assuming a case where I'd unlocked it in the morning for a payment, didn't remove the watch until many hours later or longer, and thus the Pay module would remain unlocked all during that time. In that case, I'd have to remove the watch, disrupt the pulse sensor,  or power it off/on to reset the lock condition.  I was expecting a timeout interval where the Pay Platform would auto-magically re-lock itself after a time of no further use following a PIN entry.  Not sure I want to use the "Enabled (Recommended)" mode for daily use and need to enter the PIN every day for routine activities, but good to know the difference.

[JohnnyRow]

I'm new to the NFC technology use, but my understanding is that it has to be within an inch or 2 of the reader device so not really an issue of it being unlocked and accidentally used, but I understand your concern.  I don't have a better answer.

[JohnnyRow]

I just remembered another safeguard, even when it is "on".  You have to be on that screen showing your credit card to use it.  Even if you got close enough to a sensor, without getting to that screen first, it will not pay.

[jhlaks]

There really should be a time-out for this feature so that it does not rely solely on power cycling, toggling modes, or the absence of heart rate.  In the event the last option malfunctions, the watch is an open ticket for unauthorized use.  It seems like a gaping security flaw and I suspect anyone in the security field would require a time out.

Would someone from fitbit please comment on the possibility of adding a time out feature?

Thanks!

[KarenMS1]

I found with the home screen showing, it still paid. I could only turn it off by holding the side button for 10 secs.

[kerrieBBOZ]

Agree. I would like a cancel or re-lock button or swipe from the card view. Pretty sub par to have to remember to take the device off after a payment. I can see why someone wouldn't want to have to enter a PIN after each payment if going to multiple outlets, so a timeout might not be for everyone, but you should be able to turn if off with a simple swipe or button from the card screen if you are not happy with it being left on.

[kerrieBBOZ]

That is a concern. Are you using the Versa or one of the other Fitbit devices? (I have a Charge 5)

[KarenMS1]

A Versa 2

Sent from my iPad

[KarenMS1]

I agree, frustrating that you don’t have to even re open the digital wallet.

Sent from my iPad