Inferring Your Mobile Phone Password via WiFi Signals
Holy shit.
From a brief scan it looks like the paper concentrates on recovering a numeric pin, but these attacks never get worse, only better, so I assume full keyboard access is not too far off.
What's the defense? Have your phone manage the passwords and unlock via fingerprint?