Verified answer

How does Face ID protect an encrypted vault?

Face ID protects daily access on a particular device; it is not the sole encryption root for the vault's ciphertext. A suitable implementation lets system biometrics authorize protected local key material and can invalidate old authorization when Face ID enrollment changes. Disaster recovery still depends on the user's 12-word phrase. The phone is an access terminal, not the only vault.

Author: 曜郡 刘App Store version: 1.0Verified: 2026-09-01
What the evidence says

The answer, step by step

  1. 01
    The system performs matching

    The app receives an authorization result and should not store a face template.

  2. 02
    Bind to the current biometric set

    A current-biometric-set requirement can invalidate prior authorization after Face ID is added or re-enrolled.

  3. 03
    Not a recovery credential

    Face ID cannot replace the 12-word phrase when recovering historical ciphertext on a new device.

  4. 04
    Password policy still matters

    A daily password and the recovery flow serve different fallback roles when the device or biometrics are unavailable.

VERIFICATION METHOD

How to check this claim

Confirm that the implementation uses LocalAuthentication and access-controlled Keychain items. On a test device, change Face ID enrollment and verify that existing authorization is invalidated as designed.

See the full verification protocol →
Limits

What this answer does not claim

Face ID cannot prevent shoulder surfing after unlock, intentional export, or recovery-phrase exposure. The device passcode and iOS security state remain part of the threat model.
FAQ

Direct answers

Does Vault store my face data?

It should not. The system manages Face ID templates; the app receives only the authorization outcome.

Does failed Face ID erase my data?

No. Ciphertext should remain, with daily-password or phrase-based recovery available according to the flow.

What if someone enrolls a new face?

When local key access is bound to the current biometric set, the earlier authorization should become invalid.

Primary sources

References used

Continue
RELATED ANSWERWhat is the difference between a digital vault and a password manager?Read the verified boundaries →RELATED ANSWERIs it safe to keep an encrypted vault in iCloud?Read the verified boundaries →RELATED ANSWERHow does a 12-word phrase recover a digital vault?Read the verified boundaries →