Set up biometrics for convenience, but keep a strong passcode and understand when the phone will require that passcode instead.
Before enrolment
- Install current system updates.
- Create a strong passcode first.
- Clean the camera or fingerprint sensor.
- Register only the device owner’s face or fingerprints.
Set up carefully
Use the device’s official biometric settings and follow the guided enrolment. On iPhone, Face ID can use attention checks; on Android, capability and security class vary by manufacturer and model.
Choose where biometrics are allowed
- Device unlock
- Password or passkey access
- App sign-in
- Payments and purchases
Know the fallback
The passcode is required after restart, after certain security events and when biometric matching fails. If the phone is lost, marking it lost remotely can disable normal biometric unlocking.
Accessibility and safety
Use the platform’s accessibility options where needed. People with very similar facial features, some children and damaged sensors may need a passcode-first setup.
When to review enrolment
Reset and re-enrol biometrics after an authorised repair involving the relevant sensor, when an unknown biometric may have been added or when recognition changes unexpectedly. Never add another person “for convenience” on a personal banking phone.
Keep a secure fallback code
Biometrics are convenient, but the passcode remains the underlying credential and will be required after restarts or security events.
- Enrol only the owner’s face or fingerprints.
- Test recognition in normal lighting and with any accessibility needs.
- Disable biometric approval for sensitive actions if another person can compel or accidentally trigger it.
Official sources
Facts checked: 26 July 2026. Menu paths, safety features, account procedures and network support can change. Recheck the current instructions for the exact device, software version, account and mobile provider before acting.
