Skip to main content

‘Master prints’ could be used to unlock nearly any phone’s fingerprint sensor

master prints unlock phones touchid01
Chances are that your smartphone has a fingerprint scanner built into it to help you unlock your device. One advantage to fingerprint scanners is that it makes it faster to unlock handsets than typing a pin number.

However, it’s also more secure because, as we’re constantly reminded about via CSI-style detective shows, all of us have unique fingerprints. As a result, a fingerprint scanner stops someone else unlocking your phone in the way that they could if you knew your passcode.

Right? Well, kind of.

As it turns out, computer scientists at New York University and Michigan State Universtiy have been working on developing digital “master prints.” These are the biometric equivalent of master keys, capable of tricking a variety of fingerprint sensors that trained to recognize your “unique” fingerprints.

“Our work shows that there are these things called ‘masterprints,’ which could be used by an attacker,” Nasir Memon, a computer scientist at NYU’s Tandon School of Engineering who co-authored the study, told Digital Trends. “If they had a master print that maximized their probability of success, they may be able to get through a device’s fingerprint system.”

The problem, Memon explained, is that fingerprint sensors tend to be small. Because of this, they match according to partial fingerprints, rather than whole ones. When you register your fingerprint on a new device, it breaks down your single print into a number of smaller squares. This means that, regardless of how your finger is placed on the fingerprint sensor, your mobile device should be able to recognize it.

Aditi Roy, Nasir Memon, and Arun Ross
Aditi Roy, Nasir Memon, and Arun Ross

“When you take a full fingerprint, there’s some amount of uniqueness in it, even if it’s not total,” Memon continued. “The problem is that, as you start taking partial fingerprints, that distinguishability drops. As an analogy, if you think about a face, they’re distinct because two people are unlikely to have the same face. But if you just take a part of the face, the chances of two people having that partial face are higher.”

He said that one impetus for the research had been a previous study into pin codes, which claimed that around four percent of pin codes were simply “1234.” A thief wanting to maximize his or her chances of breaking into a phone should, therefore, start by trying this string of digits.

Memon and colleagues analyzed a database of 800 fingerprints, from which they extracted thousands of partial prints. According to their analysis, a master print — able to emulate a variety of partial fingerprints — could be used to fool a random fingerprint scanner 26 to 65 percent of the time.

As Memon notes, this work is still hypothetical. They did not create physical master prints but rather carried out their work using computer simulations. The idea of a hacker glove, with a different master print on each finger, fortunately, doesn’t exist yet — but it is still a reminder of some of the perils that exist with biometrics.

Editors' Recommendations

Luke Dormehl
I'm a UK-based tech writer covering Cool Tech at Digital Trends. I've also written for Fast Company, Wired, the Guardian…
In-display fingerprint sensors are coming to cheap phones with LCD screens
Vivo fingerprint sensor review

In-display fingerprint sensors will soon no longer be a feature restricted to smartphones with OLED screens. According to Lu Weibing, the general manager of the Redmi phone brand, the company’s research and development team has solved the problem of fitting these fingerprint sensors to LCD screens, indicating cheaper phones will receive this biometric security feature in the future.


Read more
Master Lock’s fingerprint-secured padlock means never losing fiddly keys again
master lock biometric fingerprint padlock news masterlock

Your phone has a fingerprint sensor, your laptop may have a fingerprint sensor, and even getting access to your gym or place of work may require tapping a little sensor before being let in. Security mega-brand Master Lock has taken the same technology and added it to the humble padlock, replacing keys entirely, and leaving combination locks firmly in the past.

The tiny sensor is about the size of that found on phones like the iPhone 6S, only it’s square rather than round. It’s recessed into the body making it easy to locate and touch even in the dark. Surrounding the sensor is an illuminated bezel, which glows to show the status of the lock. A blue light shows it’s reading your fingerprint, a green light shows it was accepted, and a red light indicates you need to try again.

Read more
Your next iPhone — coming in 2021 — could be notchless, return to TouchID
apple iphone 11 with battery pack

Another redesign is coming for your next iPhone. First reported by the Dutch outlet LetsGoDigital , the next iPhones to grace us with their presence and deplete the contents of our wallets will likely be completely notchless, possibly contain an under-screen front camera, and re-integrate TouchID while eliminating FaceID. The expected updates are rumored to be scheduled for 2020 or 2021.

According to LetsGoDigital, Apple filed a patent in Japan for a new design without a notch, and without FaceID: “Instead the new iPhone incorporates an in-display fingerprint sensor and an under-screen camera,” the company wrote.

Read more