sodcalculator

10 Tech How-To

Unlock iPhone With a Picture? Face ID Truth

Guide 10-16433 · Updated · Step by step

No, you cannot unlock an iPhone with a static picture. Face ID uses a 3D depth map and infrared projection to verify that the face in front of the camera is physically present, so a printed photo, a screen image, or a digital picture on another device will not work. This article explains exactly why, how Face ID actually works, what attacks it is designed to resist, and the rare exceptions where a photo might fool an older or less secure system.

How Face ID Actually Works

Face ID is not a simple camera comparison. When you look at your iPhone, the TrueDepth camera system projects over 30,000 invisible infrared dots onto your face. An infrared camera reads that dot pattern, and the phone’s neural engine builds a mathematical model of your face’s unique geometry — the depth of your eye sockets, the curve of your nose, the distance between your eyes, and other 3D features. This happens in a fraction of a second, and the model is compared against the enrolled face data stored in the Secure Enclave.

A picture lacks all of this. A flat photo has no depth map, no infrared dot distortion, and no liveness signal. The phone’s infrared projector and camera would see a flat rectangle, not a face. Even a high-resolution video displayed on another screen fails the same test, because the screen emits its own light and lacks the physical structure of a real face.

What About a 3D Mask or a Sculpture?

Face ID is designed to resist more sophisticated spoofing attempts than a photo. A realistic 3D mask, a sculpted head, or a mannequin with printed facial features might fool a human observer, but Face ID checks for subtle signs of life and depth that are hard to replicate. The dot pattern must land on a curved, skin-like surface, and the infrared image must show the expected reflections and shadows. Apple has stated that Face ID uses neural networks trained to detect spoofing attempts, including masks and other 3D reproductions.

In practice, security researchers have demonstrated that a very high-quality, custom-made mask can sometimes unlock Face ID, but that requires professional fabrication, expensive materials, and access to a detailed 3D scan of the target’s face. That is not something a casual thief or curious friend can do with a printed photo. For the average person, the risk from a 3D mask is negligible.

When a Photo Could Unlock a Phone

The only iPhones that can be unlocked with a picture are older models that use Touch ID or a simple passcode — and even then, a photo only works if the phone has a weak or default passcode. Touch ID reads your fingerprint, so a photo of your face does nothing. The confusion comes from Android phones and older face-unlock systems. Many Android devices, especially budget models, use only the front camera to match a 2D image of your face. Those systems can often be fooled by a printed photo of the owner, because they lack depth sensing and liveness detection.

If you see a video or article claiming an iPhone was unlocked with a photo, it is either an old Android phone, a staged demonstration, or a misrepresentation. Apple’s Face ID, introduced with the iPhone X in 2017, has never been demonstrated to be bypassed by a simple photograph.

What Face ID Does Not Protect Against

Face ID is convenient, but it has clear limitations. It cannot unlock your phone if you are wearing a mask that covers your mouth and nose (unless you have set up an Apple Watch to unlock the phone, which is a separate feature). It also may fail with sunglasses that block infrared, certain hats, or if you change your appearance drastically — like growing a full beard or shaving your head. In those cases, you fall back to your passcode.

More importantly, Face ID does not protect you from someone forcing you to look at your phone. Law enforcement can, in some jurisdictions, compel you to unlock your phone with Face ID, because it is not considered a “testimonial” act the way a passcode is. A photo cannot be forced, but your face can. If you are concerned about this, the only reliable protection is to use a strong alphanumeric passcode and disable Face ID for unlock.

How to Prevent Someone From Trying to Use Your Photo

Even though a photo cannot unlock your iPhone, you can take simple steps to make sure your phone stays secure:

  • Always use a strong passcode (at least 6 digits, ideally alphanumeric) in addition to Face ID.
  • Enable “Require Attention” in Face ID settings so the phone only unlocks when you are looking directly at it.
  • If you are worried about someone pointing your phone at your face, press and hold the side button and either volume button for two seconds to disable Face ID and require the passcode.
  • Do not share your passcode with anyone, and be aware that Face ID can be tricked by a twin or a very close family member.

Face ID vs. Touch ID vs. Android Face Unlock

Understanding the differences helps clarify why a photo works on some devices but not on an iPhone. Touch ID (the fingerprint sensor) is purely biometric and has no camera component. Android face unlock comes in two flavors: secure (using infrared and depth sensors, similar to Face ID) and insecure (using only the front camera). The insecure version is the one that can be fooled by a photo. Apple never shipped an insecure 2D face unlock on any iPhone. Every iPhone with Face ID uses the TrueDepth system, which is why the answer to the question “can you unlock an iPhone with a picture?” is a firm no.

Common Misconceptions

One common myth is that Face ID stores a picture of your face and compares it to the camera feed. In reality, Face ID stores a mathematical representation (called a “faceprint”) in the Secure Enclave, not an actual photo. This faceprint is encrypted and never leaves the device. Another myth is that a photo of your face on a screen, held up to the camera, might work if the screen is bright enough. That fails because the infrared projector cannot create a depth map from a flat screen, and the screen’s own infrared emissions confuse the sensor.

Some people also wonder if a video of your face, played on a phone, could work. The answer is the same: no. The video is still a 2D representation, and the depth-sensing hardware rejects it.

Frequently Asked Questions

Can a screenshot of my face unlock my iPhone?

No. A screenshot is a 2D image, and Face ID requires a 3D depth map. The infrared projector and camera would not see the depth cues needed to match your faceprint.

Can someone use a photo of me from social media to unlock my phone?

No. Social media photos are 2D and lack the infrared depth data. Even if the photo is high-resolution, it cannot create the 3D model Face ID needs.

Does Face ID work with a printed photo of my face?

No. A printed photo is flat, so the dot pattern would not deform correctly, and the infrared camera would not see a realistic face. The phone would simply not recognize it.

Can Face ID be fooled by a video of my face?

No. A video is still a 2D representation. The TrueDepth camera checks for depth and liveness, so a video on a screen fails.

What should I do if my iPhone asks for my passcode instead of Face ID?

That means Face ID has failed too many times, or the phone has been restarted, or you have not looked at it for a while. Enter your passcode, and Face ID will work again.

Is Face ID more secure than a passcode?

Face ID is convenient, but a long alphanumeric passcode is generally more secure, because it cannot be obtained by pointing a camera at you. Use both for the best protection.

Related

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →