Face ID for a photo vault: convenient, with one trade-off

Should you unlock a photo vault with Face ID? What it changes about who can open the vault, and how Vaultpod handles it.

Face ID is quick. It also changes who can open the vault.

The trade

With a pattern, only someone who knows the pattern gets in. With Face ID, anyone who can get your face in front of the phone gets in, and so can anyone who added their own face to your phone. Courts and border agents treat biometrics differently from something you know, too.

How Vaultpod does it

Off by default, and only for one main vault. When you turn it on, the pattern for that vault is stored in the Secure Enclave behind Face ID. Turning it off removes it. Decoy vaults and the duress pattern stay pattern-only, so Face ID never reveals them.

Recommendation

Turn it on for a vault you open daily and whose contents you would be fine showing a family member. Leave it off for anything you would want deniable.