One of the things I don't like about Echo is that once I enable say, purchasing music, then anyone using my Echo in the house can make purchases. It would be nice if a session could prompt the user via their device for a password. This could be used in our custom apps as well. I can definitely see apps being built where access control is going to be a necessity. Of course, if there is already a way to do this, please share. :) Message was edited by: Jeff Capron
To tack onto this, voice recognition would be great. That is, determining whether I (the owner) am speaking, a friend, or someone else who is known to the Echo. With a feature like this, voice-activated purchases could automatically deduct from the correct person's account.
The current Echo Experience does allow you to set a confirmation code and will prompt you for that confirmation code when making purchases.
http://echo.amazon.com/spa/index.html#settings/shopping. I also want to point out that this experience varies based on different attributes, i.e. For prime music, prime customers are not prompted because the songs are free in that case. Currently, this is not a feature we support in the Echo SDK. With that said, we do value your feedback and will use it to drive future efforts for the Echo SDK. Thanks again!