Apple Unmasks Face ID Security

Apple is quelling concerns about its new face scanning technology—a notable and novel feature of the iPhone X–with the release of a technical paper on the phone-embedded technology.

First revealed at Apple’s keynote in early September, Face ID is an update to the now standard and optional Touch ID that grants entry into a phone through a fingerprint.

Apple detailed the advanced technology behind the facial recognition system. The new security feature authenticates a phone’s owner through its TrueDepth camera system. The camera maps the geometry of someone’s face, then Face ID uses neural networks for “matching and anti-spoofing” so only the phone owner can unlock the device.

However, while Apple said the probability that a random person could unlock an iPhone X with Face ID is approximately 1 in 1,000,000, the probability of a false match is different for twins, similar-looking siblings, and children under the age of 13. They explain that Face ID has an issue with under-developed facial features that are less distinct.

The white paper also dove into the way TrueDepth detects, analyzes and matches a face, along with how Face ID can be used with Apple Pay.

“To make a payment within apps and on the web, you confirm intent to pay by double-clicking the [phone’s] side button, then authenticate using Face ID to authorize the payment,” the paper explains.

For the security feature to first be enabled, a passcode is required. Then moving forward, the software detects your face and grants phone entry without the device’s six-number code. Apple said the FaceID isn’t meant to replace a password, just make it easier to unlock your phone in a pinch.

Apple also outlined the six circumstances in which a passcode is in fact required.

• The device has just been turned on or restarted.
• The device hasn’t been unlocked for more than 48 hours.
• The passcode hasn’t been used to unlock the device in the last 156 hours (six and a half days) and Face ID has not unlocked the device in the last 4 hours.
• The device has received a remote lock command.
• After five unsuccessful attempts to match a face.
• After initiating power off/Emergency SOS by pressing and holding either volume button and the side button simultaneously for 2 seconds.