Roll20 uses cookies to improve your experience on our site. Cookies enable you to enjoy certain features, social sharing functionality, and tailor message and display ads to your interests on our site and others. They also help us understand how our site is being used. By continuing to use our site, you consent to our use of cookies. Update your cookie preferences .
×

Roll20 app on mobile devices

   The app has a major security flaw.     If you log in to play a game, or access a character sheet, or whatever, and then sign out, someone else can log in from the same device without knowing your password! The app does not ask for the username/password again... at least not for a long time. Even after 30 minutes, there's no timeout - it just logs me right in without asking for a username/password. This is a serious flaw since it allows others to access my account and any game that I have access to.    Furthermore, if you have more than one account, like a dummy account to test things in a game, there is no way to switch accounts from the app because even after you sign out from your regular id, when you try to log in again, the app does not ask for username/password again.
1770575495
Gold
Forum Champion
Hi Saul. This forum is mostly Community help. So your post may serve as a heads-up to fellow users.  If you want to report it directly to Roll20, either go to Roll20 Help Center on the web, or click "Report A Bug" within the app.  It's known around here that the app is out-of-date and hasn't been updated, improved, or worked on very much for a long time. We don't know if they are letting it die-off (?), or plan to update it, or plan to replace it.  Some of the latest news in the area of "mobile" has been increased Mobile Browser support, for being able to use parts of Roll20 without installing an app.  I tested the app today. I was logged out. I had to log back in.  If it is a security concern for you personally, at this time I'd recommend uninstalling the app, and use Roll20 on the web (on computers) instead.