Commbank keylogging my phone?

[jonoo]

I got this pop-up after installing the new version of my banking app.

Am I reading it right that they want permission to keylog my phone?

Why would they need to record keystroke patterns or know what other apps are on my phone?

[Eigenvektor]

The should only be able to log key presses within the app itself. They are not interested in the actual keys you press but rather the patterns of how you press keys.

 

The reason they want to do this is to learn how you interact with the app. If someone else got access to your credentials, they are unlikely to use the app in the same way as you, press keys at the same speed and groupings as you. The bank is interested in this as an additional security measure, if they detect an abnormal pattern, they could use this to block access.

 

Similarly they want to know what other apps are installed on the phone, to be able to detect known bad apps.

[Stahlmann]

Meanwhile, their data protection policy:

 

[OddOod]

Welcome to the forums!
Eigen has the right of it. They're just looking at how you use their specific app to fingerprint how you interact and hopefully spot if someone who isn't you is logged in. 
This is the same tech that allows you to auto-pass captchas. Chrome just looks at the way you move your mouse and how you're typing to guess that you aren't a robot

 

[Poinkachu]

1 hour ago, Eigenvektor said:

The should only be able to log key presses within the app itself. They are not interested in the actual keys you press but rather the patterns of how you press keys.

 

The reason they want to do this is to learn how you interact with the app. If someone else got access to your credentials, they are unlikely to use the app in the same way as you, press keys at the same speed and groupings as you. The bank is interested in this as an additional security measure, if they detect an abnormal pattern, they could use this to block access.

 

Similarly they want to know what other apps are installed on the phone, to be able to detect known bad apps.

Does that mean we need to train it when we're sober and also when we're drunk ?!

[Eigenvektor]

1 hour ago, Poinkachu said:

Does that mean we need to train it when we're sober and also when we're drunk ?!

Don't booze and bank

[jonoo]

Thanks everyone.

It makes sense now, I still don't like the idea.