Skip to main content

Don’t be afraid of the big, bad Apple ‘Touch ID’ hack

iphone fingerprint unlocking texas 5s touchid
Image used with permission by copyright holder

Apple’s Touch ID fingerprint sensor, used to unlock the new iPhone 5S, can be tricked using a “fake finger,” according to a hacker group that claims to have broken the biometric security feature. If true, the hack undermines Apple’s assertions that Touch ID provides stronger security for iPhone users than the iPhone’s 4-digit pin lock – but don’t fret: Touch ID is still a valuable feature.

Before we get into why this isn’t that big of a deal, here’s how the anti-biometrics hacker group, Chaos Computer Club (CCC), successfully bypassed Touch ID, in their own words:

First, the fingerprint of the enroled (sic) user is photographed with 2400 dpi resolution. The resulting image is then cleaned up, inverted and laser printed with 1200 dpi onto transparent sheet with a thick toner setting. Finally, pink latex milk or white woodglue is smeared into the pattern created by the toner onto the transparent sheet. After it cures, the thin latex sheet is lifted from the sheet, breathed on to make it a tiny bit moist and then placed onto the sensor to unlock the phone. This process has been used with minor refinements and variations against the vast majority of fingerprint sensors on the market.

As you can see, the hack requires that whoever wants access to the device has the ability to take a high-resolution scan of the phone owner’s fingerprint, then print that out using a high-res scanner – not exactly an easy feat, or one that is easily repeatable in everyday life (as opposed to CCC’s intentional test of the security system, in which all parties were presumably complicit). Still, according to CCC spokesman Frank Rieger, the fact that this hack is possible should dispel “the illusions people have about fingerprint biometrics.”

“The public should no longer be fooled by the biometrics industry with false security claims. Biometrics is fundamentally a technology designed for oppression and control, not for securing everyday device access,” he added.

While it is disappointing that someone was able to trick Touch ID using simple methods, there are a number of reasons to take this hack with a grain of salt.

First, the easy-to-use nature of Touch ID is sure to increase the number of iPhone owners who lock their devices. Before the release of the iPhone 5S, a mere 50 percent of users locked their devices at all. Now that Touch ID is an option, that number will almost certainly increase.

Second, the CCC hack, though doable, is still a giant pain in the ass. Most thieves, I’d guess, do not have the knowledge, skill, tools, patience, or wherewithal to recreate the CCC hack. So if you’re device gets stolen, Touch ID will still do its job just fine.

Third, Touch ID still provides ample protection from the people we most want to keep out: Snooping family member, roommates, co-workers, and other people close to us. On that front, it keeps people out better than the 4-digit pin without the minor hassle of entering the pin every time the device is used.

Finally, as it’s currently configured, it is still possible to access a locked iPhone 5S using only the 4-digit pin – just swipe the screen, and the 4-digit pin unlock option appears, no fingerprint needed. Apple can, presumably, add an option to iOS 7 that allows a user to require both the fingerprint scan and the 4-digit pin to unlock the device. Do that, and the CCC hack will no longer work. I’d guess Apple will release this option once more people have become comfortable with Touch ID.

There are other reasons to be concerned about Touch ID. Minnesota Democrat Sen. Al Franken recently detailed some of them in a letter about the feature to Apple CEO Tim Cook. But the CCC hack just isn’t something to lose sleep over.

Editors' Recommendations

Andrew Couts
Former Digital Trends Contributor
Features Editor for Digital Trends, Andrew Couts covers a wide swath of consumer technology topics, with particular focus on…
I finally figured out why I don’t love the iPhone 14 Pro’s camera
A close-up of the iPhone 14 Pro's camera module.

My iPhone 14 Pro and its camera have been with me for almost a year now, but as I looked for photos to share in this retrospective about the camera’s ability, it became clear I hadn’t used it to capture many truly important moments.

It struck me as odd. After all, it’s a good camera, and the results when I do use it are often superb. Plus, I've loved iPhone cameras in the past, so why don’t I always reach for it every time I want to take a great photo? I think I've finally figured out the reasons why.
When the iPhone 14 Pro gets it right

Read more
I don’t want Apple to announce its VR headset
A rendering of an Apple mixed-reality headset (Reality Pro) in a gold color seen from the front.

Apple’s 2023 Worldwide Developer Conference (WWDC) is rapidly approaching, and I’m starting to get a rather unpleasant pain in my wallet. The long-rumored Apple Reality Pro VR/AR headset is apparently going to be revealed during the event’s keynote, and I’ve got a terrible feeling I’m not going to be able to resist it.

Why? Because Apple makes great products, I'm sure it’s going to be presented exceptionally well, and I'm doubly sure I’m exactly the person it’ll be targeting. It’s not a good combination, and I worry the only thing that's going to stop me from potentially handing over $3,000 for one is for Apple not to announce it at all.
Take the exciting concept of AR and VR ...
Apple headset render Ahmed Chenni, Freelancer.com

Read more
Don’t update your Apple Watch unless you want this ugly display bug
The Apple Watch Ultra with the Solo Loop band attached.

Last week saw the launch of watchOS 9.5, a relatively small update for Apple Watches that added the Pride Celebration watch face as well as fixed a few unspecified bugs. However, the update seems to be causing an irritating display issue for many users.

Posted to the subreddits r/AppleWatch and r/watchOS, users are reporting that the update has added a noticeable green/gray tint to their screens that changes the colors of the display and makes the usually crisp OLED screen look washed out. You can see what it looks like in the photos below.

Read more