This is quite counterintuitive until you see the explanation. It's all to do with an attacker being able to see your paw prints on the smartphone which dramatically cuts down the number of passcodes that need to be checked. Of course, with anything more than a few attempts, the typical smartphone will lock out the account for a certain time and the next time will be longer and so on. Some smartphones will even factory reset themselves if wrong passcodes continue to be attempted.
Of course, where an attacker can't see paw prints, then use a nice random number, avoiding obvious sequences of digits like 1111 or 1234 etc.
Of course, where an attacker can't see paw prints, then use a nice random number, avoiding obvious sequences of digits like 1111 or 1234 etc.
