4 ms·
Face or finger data is akin a login name... What is the password in that case? Because if you cant change your password, that could be a problem
by coronadisaster 6y ago
Face or finger data is akin a login name... What is the password in that case? Because if you cant change your password, that could be a problem
- Ayesh 6y agoFace/finger data is never revealed to the web sites. You can read webauthn for more information.
- EtienneK 6y agoThe biometric data never leaves your device. Your biometric is only used to unlock a private key stored in the secure enclave of your phone. This private key is then used to sign a server-sent challenge. The phone sends this signed challenge back to the server, where the server can validate it using the public key. The public/private key gets generated by the phone upon first registration with the server.
- coronadisaster 6y agoSo if someone has your phone and your face, not only can they unlock your phone but also the services that you are using?