Follow Up • Banno Mobile
Device-Level Authentication
The transition to device-level authentication in Banno Mobile 3.31 initially replaced the in-app PIN screen with more modern, built-in device-level security features (device passcode or biometrics). As you likely know from our SLA communication, we have re-introduced the in-app PIN screen, giving your end users additional optionality. The in-app PIN screen is included in Banno Mobile 3.31.2 – available now for Android and landing for iOS as soon as Tuesday, March 3.
You'll find supporting documentation for the new authentication flows on the For Clients Portal, toward the bottom of the Banno > Documentation page. Here are direct links to open the PDFs:
Clarification on Updated Functionality
In our previous Statement from December 2025, we stated that end users who opt out of device-level security would be required to log in after 5 minutes of inactivity. We want to clarify that there is a difference in how this inactivity period is applied, based on the operating system (OS).
For Android users, regardless of the authentication method they choose, the authenticated session is maintained and will only prompt for re-authentication after 5 minutes of inactivity. This change was implemented to improve the user experience by preventing the near-constant need to re-authenticate for common tasks that temporarily take the user away from the app (like retrieving a 2FA code).
For iOS users, those who select Device passcode / biometrics or In-app PIN (when initially setting their unlock methods for the app) must unlock the app every time it is launched or returns to the foreground. The 5-minute inactivity period applies only to devices that do not have a device passcode set. Any iOS users who rely on the in-app PIN (or who choose not to use the lock screen) must re-authenticate each time the app is launched; however, the existing session remains available if the user leaves the app (without closing it) and then returns to the app within 5 minutes.
This difference between iOS and Android functionality is due to our native builds for each OS and how each OS manages app lifecycles on the device.