Touch ID

Logo used by Apple
Touch ID module of an iPhone 6s

Touch ID is an electronic fingerprint recognition feature designed and released by Apple Inc.

History

The iPhone 5s (pictured) was the first model with a Touch ID sensor integrated with its home button.

In 2012, Apple acquired AuthenTec, a company focused on fingerprint-reading and identification management software, for $356 million. The acquisition led commentators to expect a fingerprint reading feature.

Following leaks and speculation in early September the next year, the iPhone 5s was unveiled on September 10, 2013, and was the first phone on a major US carrier to feature the technology.

Apple's Vice President of Marketing, Phil Schiller, announced the feature at Apple's iPhone media event and spent several minutes (the major portion of the conference) discussing the feature.

Wells Fargo analyst Maynard Um predicted on September 4, 2013, that a fingerprint sensor in the iPhone 5s would help mobile commerce and boost adoption in the corporate environment.

Um said,

With the unveiling of the iPhone 6 and 6 Plus at a keynote event on September 9, 2014, Touch ID was expanded from being used to unlock the device and authenticating App Store purchases to also authenticating Apple Pay.

The iPhone 6s incorporates a second-generation Touch ID sensor that is up to twice as fast as the first-generation sensor found in the 5s, 6, and SE (1st generation) phones.

As of August 2022, the iPhone 6s, 6s Plus, 7, 7 Plus, 8, 8 Plus, SE (2nd generation), SE (3rd generation), 2016 and later MacBook Pro, 2018 and later MacBook Air, iPad Pro (2nd generation) and later, iPad Air (3rd generation) and later, and iPad mini (5th generation) or later are the Apple devices which use the second generation sensor.

The new Touch ID unlocks almost instantly and posed an issue as it unlocks too fast to read notifications on the lock screen. This is remedied with the iOS 10 update in which a user must press the home button to have the home screen appear.

It, however, can be changed in iOS settings so that users can go directly to the home screen after resting their finger on the sensor, similar to previous versions of iOS.

Solely placing a finger on the sensor will only unlock the iPhone unless said setting is enabled, and no notifications are currently being displayed on the lock screen.

Touch ID was retained on iPhone 8, 2nd generation iPhone SE, 3rd generation iPhone SE, and the base model iPads, while all other iPhones since the iPhone X in 2017, and the higher-end iPad Pro have adopted Face ID recognition. Several iPads that do not have Face ID, such as the iPad Air (4th-generation and onwards), iPad Mini (6th-generation and onwards), and the iPad (10th-generation and onwards), feature a new sleep/wake button with an integrated Touch ID sensor.

In 2020, 2021 and 2022, Apple unveiled a new Magic Keyboard with optional Touch ID for its line of iMacs, Mac Studios, and Mac minis, and also the MacBook Pro.

On February 19, 2025, following the announcement of the iPhone 16e (served as the low-entry model of the iPhone 16 series) and discontinuation of its spiritual predecessor iPhone SE (3rd generation), all the iPhone models with Touch ID were consequently discontinued.

Usage

It allows users to unlock devices, make purchases in the various Apple digital media stores (App Store, iTunes Store, and Apple Books Store), and authenticate Apple Pay online or in apps.

It can also be used to lock and unlock password-protected notes on iPhone and iPad.

Touch ID was first introduced in iPhones with the iPhone 5s in 2013. In 2015, Apple introduced a faster second-generation Touch ID in the iPhone 6s; a year later in 2016, it made its laptop debut in the MacBook Pro integrated on the right side of the Touch Bar.

Touch ID has been used on all iPads since the iPad Air 2 was introduced in 2014.

In MacBooks, each user account can have up to three fingerprints, and a total of five fingerprints across the system. Fingerprint information is stored locally in a secure enclave on the Apple A7 and later chips, not in the cloud, a design choice intended to secure fingerprint information from users or malicious attackers.

Generations

First generation

Second generation

Third generation

Hardware

Components of Touch ID

Touch ID is built into the home (top) button, which is built of laser-cut sapphire crystal, and does not scratch easily (scratching would prevent Touch ID from working).

It features a stainless steel detection ring to detect the user's finger without pressing it. There is no longer a rounded square icon in the home button, nor is it concave.

The sensor uses capacitive touch to detect the user's fingerprint. The sensor has a thickness of 170 μm, with 500 pixels per inch resolution. The user's finger can be oriented in any direction and it will still be read.

Apple says it can read sub-epidermal skin layers, and it will be easy to set up and will improve with every use. The sensor passes a small current through one's finger to create a "fingerprint map" of the user's dermis. Up to 5 fingerprint maps can be stored in the Secure Enclave.

Security and privacy

Screenshot of the passcode screen of OneDrive on iOS 11, with the prompt for Touch ID unlock displayed
Screenshot of the loading screen of Microsoft Outlook on iOS 11, with the prompt for Touch ID unlock displayed
Touch ID prompts on opening screens of the Microsoft applications: OneDrive (left) and Outlook (right) in iOS 11

Touch ID can be bypassed using passcodes set up by the user.

Fingerprint data is stored on the secure enclave inside the Apple A7 and later processors of iOS devices, the T1 and T2 on Intel Macs, and the M1 and later on Macs with Apple Silicon and recent iPads featuring M-series processors.

This data is not on Apple servers, nor on iCloud, and is not accessible by Apple or any third parties.

From the Efficient Texture Comparison patent covering Apple's Touch ID technology:

If the user's phone has been rebooted, has not been unlocked for 48 hours, has its SIM card removed or has Emergency SOS activated, only the passcode a user has created, not their fingerprint, can be used to unlock the device or during other specific use cases. In September 2013, the German Chaos Computer Club announced that it had bypassed Apple's Touch ID security. A spokesman for the group stated:

Similar results have been achieved by using PVA Glue to take a cast of the finger.

Others have also used Chaos Computer Club's method but concluded that it is not an easy process in either time or effort, given that the user has to use a high resolution photocopy of a complete fingerprint, special chemicals, and expensive equipment and because the spoofing process takes some time to achieve.

Impact

In a 2013 New York magazine opinion piece, technology columnist Kevin Roose argued that consumers are generally not interested in fingerprint recognition, preferring to use passcodes instead. Traditionally, he wrote, only businesspeople used biometric recognition, although they believe Touch ID may help bring fingerprint recognition to the masses. Roose stated the feature will also allow application developers to experiment, should Apple open up access to Touch ID later on (which they have done), but that those wary of surveillance agencies such as the US National Security Agency may still choose not to use Touch ID.

Roose also noted that fingerprint technology still has some issues, such as the potential to be hacked, or of the device's not recognizing the fingerprint (for example, when the finger has been injured).

Adrian Kingsley-Hughes, writing for ZDNet, said Touch ID could be useful in bring your own device situations. He said the biometric protection adds another layer of security, removing the ability of people to look over others' shoulders and read their passcode/password. He added that Touch ID would prevent children from racking up thousands of dollars in unwanted purchases when using iPhones owned by adults. He observed that Touch ID was Apple's response to the large number of iPhone crimes, and that the new feature would deter would-be iPhone thieves. Moreover, he notes that the feature is one of the few that distinguish the iPhone 5S from the 5C.

Roose also stated the feature is intended to deter theft. However, Brent Kennedy, a vulnerability analyst at the United States Computer Emergency Readiness Team, expressed concern that Touch ID could be hacked and suggested that people not rely on it right away. Forbes noted a history of fingerprints being spoofed in the past, and cautioned that the fingerprints on a stolen iPhone might be used to gain unauthorized access. However, the article did say that biometrics technology had improved since tests on spoofing fingerprint readers had been conducted.

Kingsley-Hughes suggested the Touch ID as a form of two-factor authentication, combining something one knows (the password) with "something you are" (the fingerprint). Forbes said that, if two-factor authentication is available, it will be an overall improvement for security.

Forbes columnist Andy Greenberg said the fact that fingerprint data was stored on the local device and not in a centralized database was a win for security.

See also

References

Uses material from the Wikipedia article Touch ID, released under the CC BY-SA 4.0 license.