Is blocking use of password managers really increased security?

[Maplegate]

Chase bank has recently changed their android banking app to prevent pasting username/password during the login dialog. This effectively prevents password managers and complex passwords. Their tech support says their approach is meant to increase security. I argue that it encourages simple, easy-to-type passwords. They offer the option to use a passkey, but I have 2 Chase accounts, and a passkey only supports one set of login credentials. What am I missing here?

 

[PHolder]

You're missing freedom of choice (to use a password manager) and so all you may have left is to literally vote with your wallet?

 

[mikebarber1]

Time for a new bank

 

[Maplegate]

I have found that after typing the username, 1Password *is* allowed to paste the password. I have opted to make the username easier for me to type, and am now satisfied (but still perplexed).

 

[Darcon]

Same issue with a Medical App I have to use Healow. If you don't turn on biometrics, you have to enter a pin every 30 seconds (even mid-typing into the app) and every time you switch away from the app. Biometrics reconfirms every time the app is switched away and every minute or 2.

They don't support direct password manager, but through the context menus, it can be done with 5 taps per field using BitWarden that is IF biometrics is enabled. If PIN is enabled, the switch away to get the username or password causes a PIN entry event, which clears the clipboard. If PIN entry is enabled, you can use the context menus (and 5 taps) for 1 field, because the data in the other field is cleared for some strange reason.

Once you get past that silliness, then you don't need the password again. It is "auto-connected" in the app.

I have easy to type passwords for the doctors that require that app, and that bugs me. There is no way to change the password at some offices once it is set. Good thing there is no financial ties through their service. No saved credit cards, etc.

Discussions with support ended up being told this is the intended design. I have documented the issues, and how they could resolve them, but they are not interested in making it better. I told them I'll use the website, and delete the app.

Banking apps are not this paranoid (Pin every 30 seconds, biometric every 1-2 minutes) and they integrate with password managers just fine.