Most of the newer digital devices, including phones, tablets, and computers we use today, come with some form of biometric authentication technology. Besides digital devices, biometric authentication is also used in cars, doors, airports, and more. The two common forms of biometric authentication most devices use include fingerprint authentication and face authentication.
Fingerprint authentication is still the most common, as it is currently used on most android devices and laptops. Some Android devices also use face authentication, but it is not as secure as Apple’s Face ID on iPhones, iPad Pros, or Windows Hello (for Windows computers). That is why Face Unlock (on Android) cannot be used to authenticate payments.
In this article, we will discuss biometric authentication technology and how it is impacting the future of cybersecurity. So, without any further ado, let’s jump right in!
Benefits of biometric authentication
Ease of use and convenience
Logging into your devices using your face or fingerprint is very convenient. Instead of using a long pin or password to log into your phone or laptop, you simply have to rest your figure on the fingerprint scanning button or look at your device’s face recognition system (for devices that use facial recognition).
Devices that use fingerprint scanners allow users to register more than one finger. So, they can always log into their devices using any registered finger that is closest to the fingerprint scanner. Pro Tip: Registering the same finger more than once can slightly boost the fingerprint authentication speed, especially for older devices. The seamless experience of unlocking our devices without compromising their security makes biometric authentication technologies very handy.
It encourages users to create stronger passwords.
Many people tend to use weaker passwords to avoid wasting time when logging into their devices. Some also use weak passwords since they are much easier to memorise. However, this practice significantly lowers the security of their devices if they ever get into the hands of the wrong people.
With biometric authentication, users are much more willing to use long and stronger passwords since they are not always required to input them every time they log into their devices. However, most digital devices require users to have a backup password or passcode when setting up their biometric authentication.
However, this backup password or passcode is not always needed when logging into the devices. One of the few times you may need to input this password is when logging into your device after rebooting it. This password may also be required when if you are not able to use your face or fingerprint to log in.
For instance, if you are putting on gloves, logging in with your fingerprint is practically not possible. The same applies to face authentication if one is putting on a mask. Apple’s Face ID (for iPhone 12 and newer) has been updated, and it now works even when wearing a mask. However, most of the other face recognition systems do not work if you are putting on a mask.
Unique to every individual
One of the huge benefits of using our faces or fingerprints to log in is that everyone is unique in their own way. Even twins who may seem to look alike have a few differences on their faces and fingerprints. The first version of Face ID had challenges differentiating between twins’ faces, which enabled twins to unlock each other’s devices. However, Apple released a software update that fixed this issue.
The uniqueness of biometric authentications makes them very secure since no one else can unlock your devices apart from you. The only way you can give another person the option of unlocking your device is if you register their finger or Face when setting up your biometric authentication. However, this is something security experts don’t recommend.
It can be used to sign in to online accounts.
On top of logging in to your device, several online platforms now allow users to log in using their face or fingerprint. Most password managers also allow users to use their biometric authentication to sign in. This makes it possible for one to sign into all their online accounts using their fingerprint or face.
With this option, users now feel more comfortable creating stronger passwords for their online accounts since they won’t have to input them every time they sign in. This experience is even much better if you are in the Apple ecosystem. All the devices with your iCloud account will allow you to sign in to all platforms with Face ID or fingerprint if your passwords are backed on Apple’s iCloud keychain.
More inclusive
One of the underrated benefits of biometric authentication is that it can be used by all kinds of people, no matter their physical capabilities or literacy. For example, using your face to sign in to your devices and accounts can be very handy for someone who cannot memorise a password or is physically incapable of typing the password.
So, people with physical disabilities can now conveniently log into their devices without compromising security. If you are planning on buying a device for someone with some form of physical disability, it is always best to get one that suits their needs. For instance, a person who is physically incapable of typing would prefer a device that allows them to sign in with their face.
Potential risks and challenges of biometric authentication
Despite the many benefits, biometric authentication has a couple of risks and challenges that the responsible parties need to address to make it much more secure and reliable. Some of these include the following;
Privacy concerns
Giving your biometric data to any device or platform that you would love to conveniently sign into raises privacy concerns, especially if the company has a bad track record when it comes to privacy. This data can be exposed to the public in the event of a data breach or if hackers get access to the identity management systems of the platform.
The good news is that most of the platform vendors, including Apple, Microsoft, and Google, store all user biometric authentication data locally on their devices. That’s why you are required to set up your biometric authentication every time you get a new device. So, before you trust a platform or device with your biometric data, make sure you have full details about where and how this data is stored.
Errors
The two common errors in biometric authentication are False Acceptance Rate (FAR) and False Rejection Rate (FRR). With FAR, a wrong user is allowed to sign into a given device or platform. With FRR, the right user is denied access to the platform or device. The most dangerous one of the two is the False Acceptance Rate since it enables the wrong user to access another person’s device.
On the other False Rejection Rate is annoying, especially if you want to quickly access something on your device. Most authentication systems today will recognise your face or finger 99% of the time. However, the few times it doesn’t can really be frustrating since you will now be required to input your password to get access to the device.
Technological limitations
Some biometric authentication devices are limited by the capabilities of the technology they use. For instance, Face Unlock on Android devices does not work in the dark. Unlike Windows Hello and Apple’s Face ID, which use infrared sensors to map out your face, Face Unlock uses your device’s front-facing camera to recognise your face.
Despite the recent advancement in camera systems, we are yet to see cameras that can recognise people’s faces in total darkness. Until then, most Face Unlock technologies will only be usable in a well-lit environment, making them less convenient. That’s why most devices with Face Unlock also give users the option to unlock their devices with a fingerprint scanner.
Speaking of fingerprint scanners, those that are built into the device screens are sometimes slow, which affects the overall experience of logging into your device. A number of users of Google’s Pixel 6 devices complained about the sluggishness of the fingerprint scanner. Google and most Android OEMs use optical fingerprint scanners, which are not as fast as an actual fingerprint scanner.
On the other hand, some Android OEMs, such as Samsung, use the more advanced ultrasonic fingerprint scanner, which is much faster and also experiences fewer errors. It also works really well if your hands are oily or wet. However, it is much more expensive, which is why most manufacturers opt for the much cheaper optical fingerprint option.
Final thoughts
Biometric authentication has several benefits when compared to using traditional passwords and passcodes. The convenience of signing into your account or device without having to input a long password is among the reasons many people love biometric authentication. However, most biometric authentication technologies have security loopholes and some functional challenges that need to be addressed before they we can rely on them as the perfect authentication solution.
