188JILI Biometrics: Fingerprint and Face Sign-In Explained

Biometrics are the fingerprint, face or iris checks that let you approve a sign-in or a payment with a touch or a glance. They protect a wallet or casino login by making the phone harder to open and by confirming it is you when an app asks. They sit second in the order set out on the mobile security settings page, right after your screen lock.

Biometrics on Pixel and iPhone

Each maker keeps its own method, and the pages below are the ones Google and Apple publish.

Where your biometric data is kept

On a Pixel, Google says your fingerprint data is stored securely, never leaves the phone and is not shared with Google or with the apps on it. Face images used to build the face model are not stored; the model is, on the device. You can delete the model under Settings, Security & privacy, in the device lock section, under Face.

On an iPhone, Apple’s security guide describes this path for a sign-in:

1. The sensor captures the biometric image and sends it to the Secure Enclave.
2. During enrolment the Secure Enclave processes, encrypts and stores the template.
3. During matching it compares the new scan with the stored template and answers yes or no.
4. For Touch ID, the raw scan sits briefly in encrypted memory and is then discarded, and the finger data needed to rebuild your fingerprint is thrown away.

What a casino or wallet app receives

When an app asks for your fingerprint or face, the phone’s own system prompt runs the check, and the answer is limited:

1. The phone shows its own prompt, not the app’s.
2. The phone matches your finger or face against the stored template.
3. The app is told only that authentication succeeded or failed, per Apple, and Google says your fingerprint information isn’t shared with the app.

The lobby, like any site you open in a browser, never sees your fingerprint.

Chrome can use biometrics when it fills a saved password. Google’s page says biometric authentication with passwords is off by default, and that you can turn it on so the phone confirms it is you before it fills, reveals, copies or edits a password. The saved passwords on your phone page covers the password side.

Setting up biometrics on a Pixel

Follow Google’s page for Pixel 6 and later. Menu names vary by phone maker, so check yours if it is not a Pixel.

1. Open Settings, then Security & privacy, then the device lock section and Fingerprint.
2. Follow the on-screen steps and add a backup PIN, pattern or password if you have none.
3. Scan your first fingerprint, placing the centre of your finger over the sensor and then the edges and tips.
4. Add up to 4 fingerprints, but only your own.
5. For Face, go to Security & privacy, the device lock section, then Face, and choose whether it opens the phone, verifies you in apps, or both.

When biometrics are not enough

Google says a copy of your fingerprint could be used, because you leave fingerprints on many things you touch. For Face, Google adds that someone who looks a lot like you, such as an identical sibling, may open the phone, and that someone could hold the phone to your face. Face has an option, Always require confirmation, that adds a step when you sign in to apps or approve a payment.

The backup lock is needed after a restart, after a few failed tries, when you switch user, and when more than 72 hours have passed since you last used it. Apple says Touch ID does not replace the passcode, which is still required after startup or restart. A phone with a weak PIN and a good fingerprint is still guarded by the weak PIN, so pick a strong one.

Biometrics inside a wallet

GrabPay’s transfer page asks you to key in your biometrics to confirm a transfer to another bank account or e-wallet, and its scam page lists enabling Face ID or fingerprint authentication as an extra layer on every transaction. Using the wallet’s biometrics does not change what the wallet allows, and the phone’s own protections still do the groundwork. The antivirus on Android page covers malware, and the Google Play Protect checks page covers the scan that guards your apps.