Menu Menu

iOS 15’s face and thumb ID to revolutionise password security?

Apple believes biometrics are the natural successor to our manual passwords, offering increased security and convenience. We’ll soon put that notion to the test with the rollout of iOS 15.

If you’re one of life’s rarest breeds: a person who has never forgotten a password, chances are the ones (or one) you’re currently using probably aren’t all that secure.

Now part and parcel of modern day living, passwords are required to get into everything from our computers and social media accounts, to our subscriptions and console profiles. Between our work and leisure time, we’re swamped with them.

If you’ve ever sent a selfie holding a piece of paper with a handwritten code on, or suffered the ordeal of transferring your online banking account to a new phone, millions of others have felt your pain.

In fact, an estimated 78% of people are said to have forgotten and reset passwords, while 72% reuse the same passwords on multiple platforms.

One can either juggle an endless catalogue of passwords at once, or live with the knowledge that their entire online presence is all but tied to a single phrase. We all have to pick our poison, less we up and leave tech behind for good.

It’s for these reasons that Apple’s secret option C, biometric mobile IDs, were so well received in 2013 and continue to be utilised by smartphone vendors across the board today.

In the tech’s current state, granted, we’re essentially limited to unlocking our phones, making contactless payments, and logging into the odd app, but Apple staunchly believes biometric IDs to be the next logical step in improving password security.

After years of talking up the tech’s potential, Apple is fully ready to put its money where its mouth is with the rollout of iOS 15 – and an ambitious new system labelled ‘Passkeys in iCloud Keychain.’

Credit: Apple

Unveiled in a WWDC presentation, Apple engineer Garrett Davidson showed a demo where third party apps were opened without the familiar username, password combo. Instead, log-ins were performed almost instantly through typing in a username and scanning either a registered face or touch ID.

A third option showed that iOS 15 will also allow us to create intuitive ‘passcodes’ like those we use to unlock our phones, and utilise them as an alternative to passwords. All such features will be available of Macs with touch ID, if you’re lucky enough to own one.

These functions are made possible by a web authentication company called WebAuthn, which also develops for Google and Microsoft. In the case of iOS 15, its public key cryptography will link our scannable signatures to our Apple IDs – syncing them across any Apple devices we happen to use via iCloud. Sophisticated stuff, eh?

The prospect of doing away with passwords for good would definitely save us upheaval in the long term, but putting the obvious convenience of biometric IDs to one side, are we yet ready to replace traditional systems ingrained over decades?

Credit: Apple

Despite a growing industry consensus that passwords will inevitably die out, a portion of those involved in online security are concerned the likes of Apple are being a little too hasty and are overlooking potential hiccups. Big ones.

While there is no immediate way of someone hijacking your distinct biometric scans today, you’d best believe people will try to find loopholes where they can. Its begs the question: if compromised, how would we lock them out?

As Sean Wright, security chief as Immersive Labs asserts: ‘This is not like a password – you can’t simply change your fingerprint or facial features.’

Instead, Wright believes we should utilise tokens like Yubico which can store our biometric data in the same way as Apple’s iCloud, but crucially, can be discarded if need be. ‘If my token is ever compromised, I can simply replace it with another one,’ he stated.

Whether or not we’re ready to scrap passwords completely is anyone’s guess right now, but in typical fashion Apple is determined to make the leap first.

Roll on Autumn and the release of iOS 15.

Accessibility