Click to Skip Ad
Closing in...
  1. Best Robot Mop 2021
    08:29 Deals

    The world’s first self-cleaning robot mop is $100 off at Amazon – and I’m obsessed

  2. Best Meat Thermometer 2021
    09:31 Deals

    The gadget that helps you cook perfect steak is $33 at Amazon, a new all-time low

  3. MacBook Pro 2021 Price
    12:16 Deals

    Apple’s M1 MacBook Pro is $200 off at Amazon, matching the lowest price ever

  4. Instant Pot Sale
    13:23 Deals

    Amazon’s best-selling Instant Pot has 133,000 5-star reviews – today, it’s only $64

Reasons to never rely on fingerprints over passwords

November 17th, 2015 at 9:30 PM
Fingerprints Vs. Passwords Mobile Security

Touch ID and other fingerprint scanning technologies are wonderfully convenient additions to our smartphones that enable easy mobile payments and quick device unlocking. However, Elliot Williams at HackADay has written a thought-provoking essay explaining why you should never rely on Touch ID in lieu of using a password on your device, no matter how convenient it is.

FROM EARLIER: Anonymous kicks off cyberwar against ISIS, gets 900 Twitter accounts banned

First, Williams acknowledges the obvious: Passwords are terrible and they’re not all that secure. But as much as we may hate passwords, he argues that relying on Touch ID for mobile security is a much worse option. There are many reasons for this and the most obvious one is that your fingerprints are not some unique secret that’s difficult to come by.

“You leave your fingerprints everywhere,” he explains. “They can be picked up off of paper, keyboards, and desk surfaces. You wouldn’t leave your password written down on a sticky-note attached to your monitor at work, would you? If your work is using your fingerprint for authentication, your password is probably on your monitor right now.”

And of course, hackers have already shown they can copy users’ fingerprints using several different methods including swiping an image of a fingerprint take from a photo. Other problems with fingerprints include the fact that you can’t just reset them like you’d reset a compromised password and the fact that fingerprints can’t be hashed the way passwords can.

Williams’ entire essay is very much worth your time — check out the whole thing here.

Popular News