Control access to your devices
Secure your devices against unauthorized access just like you protect your home against burglary.
In today's world, biometric authentication has become a natural part of our lives. Unlocking your phone with your fingerprint or face is fast, convenient and commonplace. We have become accustomed to this convenience, but have we considered how it works and whether it is secure? In this article, we take a look at the technical side of biometrics on phones and computers, address concerns about privacy and security, and discuss why you should trust this technology.
How does it work?
When you use an Android or iOS phone, or a macOS or Windows computer, your biometric data (fingerprints or face) is not saved as a photo. Instead, a unique string (‘hash’) is generated from them, which is then compared during authentication. This data is encrypted and stored in a special secure chip. On Apple devices, this is Secure Enclave, while on Windows devices, Windows Hello uses Trusted Platform Module (TPM) technology. On Android phones, manufacturers often use similar solutions such as TrustZone.
Security first:
Is this solution secure? Yes, and very much so! As we mentioned, the biometric data is converted into a unique string of characters, which is encrypted and stored in an isolated chip, inaccessible to anyone, even the device manufacturers. This means that no one has access to your biometric data.
So why are biometrics a concern?
Although the technology is secure, we still encounter privacy concerns. The media and the public often demonise biometrics, raising alarms about surveillance and excessive intrusion into private lives. This is partly due to legislation such as GDPR, which restricts the use of biometrics, and differences in the implementation of the technology. Often biometric authentication is confused with remote biometric identification, which refers to the use of artificial intelligence technology to identify people remotely, based on their biometric characteristics such as face, fingerprints, iris and even voice patterns. It is a technology used to recognise and verify the identity of individuals without the need for physical contact. Significantly, it is a technology whose use is mostly prohibited by the AI Act, which came into force on 2 February 2025. However, in the case of the phones and computers we are discussing, these concerns are unfounded.
Biometrics at work:
Sometimes when an employer introduces biometric authentication, employees start to have doubts. Many employers offer this as optional or requiring employee consent. We hope that in the future, awareness and attitudes will change and people will understand the benefits of biometrics in the workplace as well. Once again, we emphasise: no one, including the employer, ‘has’ your e.g. fingerprint recorded in a way that we associate with films about criminals and police officers!
Summary:
Biometric authentication is a convenient, secure and future-proof solution. It allows us to unlock phones and computers quickly and efficiently, while protecting our privacy. We don't have to remember passwords and our data is safe. We hope this article has helped to dispel any doubts you may have and encouraged you to use biometrics in your everyday life.