Hello, all.
Just now I'd launched Safepay, loaded a finance-related website in one tab, successfully logged in to my account, navigated through a couple of links …and then the Safepay session suddenly died — Safepay was shut down.
Everything else on the laptop continued to function normally, AFAIK.
Shortly after being returned from Safepay to the "default" desktop, a Windows notification appeared above the System Tray asking if I'd like to turn on Virus Protection. Which is the typical message that comes up when there isn't any protection active. I did not click "OK", because from past experience I have observed that there may be only a short wait until protection is restored without my intervention.
Then a while later (circa 60 seconds), a message appeared from Bitdefender ("BD"):
"Update completed
Bitdefender is running with the latest improvements and fixes."
So this leads me to wonder whether the automated BD update in the background caused the Safepay session to be killed.
If so, I have to say it's not very user-friendly at all. For one thing, it's a hassle to log in to some of these accounts with the MFA, and navigating the menus, which is just tedious. For another thing, a user could be halfway through entering some information — maybe for a transaction, maybe for a pay claim, maybe changing an account password — when the Safepay session is killed, which could, theoretically, corrupt that data entry.
My suggestions for better behaviour would be one of the following:
- Warn the user that a BD update is in progress, and ask whether Safepay can be closed in order to complete the update.
- If the user answers, "No," then a reminder can be shown at regular intervals to remind them — perhaps hourly.
- This seems like a good balance of user-friendliness and risk-avoidance to me.
- Warn the user that a BD update is in progress, and advise them that Safepay will be closed in (say) fifteen minutes' time so that the update can be completed.
- Display a countdown timer directly in Safepay so that the user knows exactly when the session will be ended, and will not forget about the prior warning/advice, nor lose track of time.
- Optionally there could be a "snooze" facility for the user to restart the timer. If the user walks away from the device, the timer will not be reset, so the update would almost certainly be completed within a few hours.
- Silently wait until the user closes Safepay, and then complete the update.
- This entails more risk, as the user won't be aware of the pending update that has 'stalled'. Personally I don't usually keep Safepay open for more than an hour, but maybe some users do.
- A compromise could be to silently wait for up to (say) one hour. If the user hasn't manually closed the Safepay session after an hour, then proceed to one of the two abovementioned options.