Faceid a major security risk

Question

Level 1

4 points

Faceid a major security risk

Is FaceID A MAJOR SECURITY RISK ?

IMHO it is probably ok to use faceID to login to your iphone, but not also to login to passwords.

PROBLEM: activating Face ID to login also activates faceID for passwords. This means a person could gain access to all your banking passwords by holding your phone in front of your face. How many times has this happened, but has never been reported to the iPhone community?

SOLUTION: make a toggle to turn off faceID for passwords, requiring manual access.

Am I wrong in my assessment?

iPhone 6s Plus, iOS 15

Posted on Jul 8, 2022 1:14 PM

Reply

Answer 1

Top-ranking reply

Chattanoogan

Level 7

32,168 points

Jul 8, 2022 1:29 PM in response to gypsydan

You’re not wrong.

It’s the long-running tension between security and usability/supportability.

The risk is mitigated somewhat by the “Require Attention” and “Attention Aware” options as well.

Suggest you might provide this as formal feedback to Apple via:

Feedback - iPhone - Apple

and possibly:

Report a security or privacy vulnerability – Apple Support (AU)

Reply

Answer 2

KiltedTim

Level 10

228,312 points

Jul 8, 2022 1:17 PM in response to gypsydan

It already exists.

Look in Settings>Face ID & Passcode…

Reply

Answer 3

gypsydan Author

Level 1

4 points

Jul 9, 2022 3:28 AM in response to gypsydan

In 15.5 settings it is not possible to turn off faceID for looking at passwords, unless you turnoff faceID for phone.

Reply

Answer 4

pjswiz

Level 5

5,436 points

Jul 8, 2022 1:17 PM in response to gypsydan

Yes and no.

They would require access to your iPhone to access these accounts. If you're giving out your iPhone to people then yes you should probably disable this feature for certain accounts. However, if the iPhone is only used by you it's not that big of a security risk.

If you lose the iPhone just mark it as lost and from there no one can access the accounts or data the iPhone has on it.

Reply