But you're tied to Bank-Id/Mobile-Id. If you lose your phone (or it's stolen) with all your certificates etc, will someone be able to do bad things with your account?
Re:2015 Gates Annual Letter
by henrikschroder on Thursday January 22, 2015 @03:46PM
(#8931636)
So the mobile bank-id is one way that you can use to identify yourself to various bank and government websites, most places still have multiple ways to sign on.
The mobile bank-id is still passcode-protected. The way it works is that whenever I want to sign on to one of these sites, I just enter my public personal id number. The app will then wake up, tell me that someone wants to identify as me on site X, and to enter my passcode if that's correct. If you steal my phone and don't have my passcodes, you can't do that. And I can revoke existing certificates if my phone gets stolen so they don't work even if you know my passcode.
(I was very surprised when I moved to the US and realized that changing your address here means going to every single government agency and business you have a relationship with, and independently changing your address with them, instead of just doing it once in the central registry. I also found out that apparently you can't change your name on your driver's license if you have unpaid parking tickets. This is hilarious and unfathomable to me)