Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
I thought was clear that FaceID was more secure than TouchID in their keynote no?

Phil Schiller stated the chance of a random person being able to unlock another device with the Touch ID was one in 50,000 and Face ID should have a one in 1,000,000 chance of a false positive.
 
goods job it locks after a certain amount of tempts.
The number is 10, if I remember correctly.

Last time I changed my passcode, I put the new code in 1Password. The only problem with that process was that I didn't actually enter what I thought I had. A case of my mind moving faster than my fingers. I rebooted my phone to test the new passcode. And sure enough, I was met with the not correct passcode; failed attempt 1 message. Tried two more times to the same message. Looked back at 1Password and realizsed that my saved password was 2 digits off from what had been entered. After a total of 5 attempts, I was good to go. Needless to say, I changed the code again to make sure it matched my 1Password entry. Good thing the attempt threshold was higher, as I did not want to have to head to the Apple store and show proof of purchase etc. to get it unlocked.
 
Biometric security is about convenience. Not security. Also Touch ID does the exact same thing when a print fails to register.
 
Haha. You’re missing the point. 4 digit or 6 digit code is irrelevant.

FaceID was sold to us because it was infinitely more secure than TouchID. We have to agree that TouchID is infinitely more secure than a 4 or 6 digit code. You guys are even laughing at my stupid friend for setting a 4 digit code (like many people) but if FaceID falls back to a 4 or 6 digit code it is no more secure than a 4 or 6 digit code it replaces.

If FaceID 2 is accurate to say only 2 people on planet Earth but a failed login attempt falls back to a 4 or 6 digit code than the entire FaceID security is irrelevant.

Think about it before you reply!

Touch ID falls back to a PIN too. Not really getting your point at all. :confused:

Congrats for winning the “Worst thread on Macrumors” for today.
 
But MOST people would never do that. I bet 90% of codes are 4-6 digits.

This being the case it’s irrelevant how secure FaceID is.



That's sort of their problem.
You can choose between 4 digit code, 6 digit code and alphanumeric password, not sure how that's an issue.
People are free to make stupid decisions.
 
  • Like
Reactions: lexvo
This thread should just get closed already.

No it shouldn't. This thread highlights that most people have no idea what the reasons behind biometric security are. The fact that people think Face ID somehow makes their device more secure is laughable. (it may be more convenient, depending on the user).

As per usual here, people are focusing on that they think the X is being criticised and reacting to that.
 
Biometric security is about convenience. Not security. Also Touch ID does the exact same thing when a print fails to register.

I agree. Consumers Security is always the upmost concern and should be priority, but biometric is also extremely reliable for what it is. Touch ID perfect example of that. I’m actually more curious than anything to see how Apple spans on Face ID for the next upcoming versions of the iPhone.
 
Phil Schiller stated the chance of a random person being able to unlock another device with the Touch ID was one in 50,000 and Face ID should have a one in 1,000,000 chance of a false positive.

Yep, this is actually a transcription of the keynotes.

"Now how do we compare that to Touch ID? How secure is it? Well, there’s no perfect system, not even biometric ones but as we said earlier, Touch ID is the gold standard for consumer device biometric protection. And the data for Touch ID has been one in 50,000. Meaning that the chance that a random person could use their fingerprint to unlock your iPhone has been about one in 50,000 and it’s been great.

So what are the similar statistics for Face ID? One in a million. The chance that a random person in the population could look at your iPhone 10 and unlock it with their face is about one in a million. And of course, the statistics are lower if that person shares a close genetic relationship with you. So, for example, if you happen to have an evil twin, you really need to protect your pass code or your sensitive data with a pass code. Hopefully you don’t."

I said they made it clear earlier however I should have said they were precise. If someone confuses that....well they are just hearing what they want to hear and fit it into an agenda. They even say you need to use a PASS CODE! Lol good stuff...
 
Face ID is supposed to be more secure than Touch ID.

It’s not.

In fact it’s no more secure than a 4 digit code.

Here’s how...

Pick up your mate's iPhone X. Try to authenticate using FaceID. You can’t. Now look what happens. You simply need to input their security code (could be 4 digits) to gain full access to the phone.

Apple could make FaceID 2 a hundred times more secure in iOS 12 but if it falls back to a 4 digit code it’s irrelevant.

Never thought about it until tonight when a mate demonstrated it to me in the local pub!!!

I think you’ve missed the point of FaceId and TouchID.

You’re right, they will never be more secure than a passcode because the device will ALWAYS allow a passcode override. In fact, power off the device and you must enter the passcode to unlock before it will accept Face or TouchID. Try to make any changes to the security setting of your device and it requires the passcode.

TouchID and FaceID are convenience features to allow for a secure way to avoid having to enter a passcode every time you unlock your device or authorize a purchase, but really, your device has only ever been as secure as your passcode.

So if you’re worried about it, just make your passcode crazy strong because you should seldom have to use it. It doesn’t have to be just a 4 digit pin. It can be 6 digits, or a full alphanumeric case sensitive password.
 
Pick up your mate's iPhone X. Try to authenticate using FaceID. You can’t. Now look what happens. You simply need to input their security code (could be 4 digits) to gain full access to the phone.

That's the daftest thing I have heard in ages. If you hand over your passcode to anyone, then your security is gone. Common sense. FaceID is a shortcut. The passcode is security.
[doublepost=1521229406][/doublepost]
A 6 digit password would be equally secure as Face ID
Actually, less secure. According to Apple, one in a million faces can unlock your phone. But if I can't unlock your phone with FaceID the first time, then I can try as often as I like, it's not going to work. (That one in a million person will unlock it every time, but 99.9999% of people have no chance to unlock it ever). With your passcode, I can try again and again. Well, at least ten times. So the chance is ten times higher.

No it shouldn't. This thread highlights that most people have no idea what the reasons behind biometric security are. The fact that people think Face ID somehow makes their device more secure is laughable. (it may be more convenient, depending on the user).
Actually, if we can convince you to use eight digits instead of four, which you can do because you rarely need to type it in, then FaceId makes your phone more secure.
[doublepost=1521229713][/doublepost]
Last time I changed my passcode, I put the new code in 1Password. The only problem with that process was that I didn't actually enter what I thought I had. A case of my mind moving faster than my fingers. I rebooted my phone to test the new passcode. And sure enough, I was met with the not correct passcode; failed attempt 1 message. Tried two more times to the same message. Looked back at 1Password and realizsed that my saved password was 2 digits off from what had been entered. After a total of 5 attempts, I was good to go. Needless to say, I changed the code again to make sure it matched my 1Password entry. Good thing the attempt threshold was higher, as I did not want to have to head to the Apple store and show proof of purchase etc. to get it unlocked.

I don't know what Apple can do, but they cannot unlock your phone. If they cannot unlock the phone of a criminal when the police produces a search warrant, then they cannot unlock your phone.
 
Last edited:
I have to agree, it should always be Face ID.

It is so annoying when randomly your phone will ask you to enter your passcode to enable Face ID. It’s so backwards!
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.