I'd like to enable what is basically 2FA to login to my iPhone. Require both FaceID and a passcode.
That way somebody can't unlock my phone just by pointing it at me. That way somebody can't take my phone and try to bruteforce the passcode.
iPhone Xs, iOS 12
Nope, doesn't work that way. You will still have to enter a 4 or 6 digit passcode along with registering your face. Anytime you turn your phone off, reboot it or perform a major software update, the first time you turn your phone on, you will need to use your passcode. After that, your face will unlock your phone and there is no setting to require both on iPhone.
Your premise that someone can unlock your phone if they have it by pointing at you, doesn't really hold much anyway. You have to be within arms reach for the True Depth camera to see you and unlock your phone. If they are that close, you can grab your phone out of their hand anyway. When you record your face, your eyes should be open. My phone won't unlock unless I'm actually looking at my phone with my eyes open.
Nope, doesn't work that way. You will still have to enter a 4 or 6 digit passcode along with registering your face. Anytime you turn your phone off, reboot it or perform a major software update, the first time you turn your phone on, you will need to use your passcode. After that, your face will unlock your phone and there is no setting to require both on iPhone.
Your premise that someone can unlock your phone if they have it by pointing at you, doesn't really hold much anyway. You have to be within arms reach for the True Depth camera to see you and unlock your phone. If they are that close, you can grab your phone out of their hand anyway. When you record your face, your eyes should be open. My phone won't unlock unless I'm actually looking at my phone with my eyes open.
I'd like to see it changed. 2FA is a very common scenario.
The courts have regularly ruled you cannot be compelled to give up information from your brain, that it is testimony. (Reveal PIN) But you can easily to be forced to provide Fingerprints, DNA etc. So the court could easily force you to hold still and open your eyes while law enforcement puts your phone in front of you.
This means the FaceID isn't perfect.
If, on the other they seize your phone and try to brute-force the pin. This isn't perfect either.
If it instead requires 2fa, your face and your pin, it'll be infinitely harder for them to break in.
We're just users on this forum. We can't change anything. Only Apple can. I can tell you I don't want it changed as Face ID is more than secure enough for my needs.
If you want to convey your thoughts to Apple, you can provide feedback to them via this link: Feedback - iPhone - Apple
I see this as a choice, not mandatory. NoAuth or Face or PIN or Face+PIN.
I agree with you there, Face ID is enough for me too, and would not like the idea of having to do Face ID as well as passcode, that would drive me nuts. I shall be glad when the I-Pad has Face ID in the next one Apple bring out instead of Touch ID, which is what we have at present.
Can I use FaceID + Passcode to unlock my phone? I don't want either/or, I want AND.
