I enabled the feature “Require Face ID to access Private tabs”. When I open a private tab manually inside the Brave app, it correctly asks for Face ID.
However, I discovered that when using an iOS Shortcut that opens Brave directly into a Private tab, Brave bypasses the Face ID verification and goes straight into the private browsing tab. This means the privacy lock can be circumvented.
Steps to reproduce:
On iOS, enable “Require Face ID to access Private tabs” in Brave settings.
Create an iOS Shortcut that opens Brave private mode.
Run the Shortcut.
→ Brave opens the private tab without Face ID, which should not happen.
Expected behavior:
Brave should always require Face ID before showing any private tabs, even when opened via iOS Shortcuts.
@kingndq I’m trying to poke around on things but you’re in settings I generally don’t see. I was trying to look at Siri settings and the Shortcuts app, but I wasn’t seeing the menu you are viewing. The options to open in Brave did not say Private.
Perhaps the people at Brave might be better at figuring it out, but it would be very helpful if you can give a somewhat detailed explanation of how you’re setting things up so it’s easier to test and then potentially fix.
Hi Saoiray, this is how I added the “Open Private Tab” shortcut in Brave:
I opened the Brave settings.
I opened the Siri Shortcuts section in the settings.
Then I opened the Shortcuts app and tried using the shortcut that Brave added for me.
The problem is still there, it bypasses Face ID when I use that Brave shortcut instead of waiting for Face ID to respond while Ask for face ID and Keep private tab already toggle.
Wow, somehow my brain always skipped past this part and did not even notice it there. That is sad. And usually I’m wanting to keep a close eye. I’m feeling a little stupid right now.
