Your phone unlocks as soon as you look at it. Then an uncomfortable thought arrives: could someone hold up your profile photo and get the same result? “Face recognition” sounds like one feature, but the name covers different approaches.
Recognizing a face is not the whole job
You can identify a friend in a photograph. Deciding whether that friend is physically standing in front of you is a separate question. Face unlock similarly has to recognize the owner and distinguish a real face from an imitation.
Some methods rely heavily on a flat camera image; others use additional information, such as depth or infrared data. A sharp portrait can show the shape of a nose without having a nose that actually projects into space.
Samsung's explanation of biometric authentication notes that facial recognition without three-dimensional mapping can be spoofed with a photo. That article is from 2021. It should not be stretched into a claim that every phone sold today can be unlocked by any photograph.
Face ID is more than comparing two selfies
Apple explains that its TrueDepth system builds a depth map using invisible dots and also captures an infrared image. An ordinary printed portrait or a two-dimensional image on another screen does not contain the required face-depth information.
Thinking of Face ID as simply comparing a saved selfie with a new selfie misses that distinction. A picture can look exactly like you while still lacking information the authentication system needs. Apple says Face ID requires depth data and is designed to resist photo-based spoofing.
This is not a promise that all facial authentication is impossible to fool under every condition. Similar-looking relatives or twins raise other considerations, and devices have their own settings and precautions. “Will a normal photo work?” and “Is this perfect in every situation?” are different questions.
Read the security guidance, not just the sensor count
Nor does a smaller number of visible sensors prove that a phone must accept photos. Software and testing matter too. Two phones that look similar need not provide equivalent biometric security.
Android's biometric security measurement guidance considers both incorrect acceptance of another person and acceptance of spoofing attempts. Check the manufacturer's guidance for your exact model and the authentication uses it supports.
A face might unlock a screen while a financial app asks for a fingerprint or passcode. That can reflect different permitted uses for the authentication method, rather than merely an inconvenient app. The useful question is its verified security level, not whether the phone has a face-unlock option.
What should you check on your own phone?
Start with official guidance for the model. If it warns about photo spoofing or discourages the method for sensitive uses, choose a stronger lock. An unpredictable passcode remains important even when you use a biometric convenience feature.
The answer depends on the device. Some face-unlock systems can be fooled by photographs; systems such as Face ID, which require depth information, are not designed to unlock from an ordinary two-dimensional photo alone. Check your model's implementation and official security guidance.