How to set up a passcode, Face ID or fingerprint unlock

Biometrics are a convenience layer sitting on top of your passcode, not a replacement for it. Set the passcode properly first, then enrol a face or finger to make daily unlocking painless.

The passcode is still the key

Every biometric system falls back to the passcode, PIN or password, and on phones that code is also tied to disk encryption. A four-digit PIN has ten thousand combinations; six digits has a million; a short alphanumeric passphrase is stronger again. iOS defaults to six digits and hides the shorter option under Passcode Options during setup, and Android offers PIN, pattern and password, with pattern the weakest of the three because smudges and shoulder-surfing give it away.

Your device will also demand the code in situations where a face or finger is refused: after a restart, after several failed biometric attempts, after a long period without an unlock, and when you change security settings. That is deliberate, and it is why a memorable but strong code matters more than the sensor.

Enrolling Face ID and Touch ID

On iPhone and iPad the whole area lives in one pane named after the sensor your model has, so it reads Face ID and Passcode or Touch ID and Passcode. Enrolment asks for two circular head movements for Face ID, or repeated finger placements including the edges for Touch ID.

Add an Alternate Appearance if you often wear glasses, a helmet or heavy make-up, and register a second finger so a bandage does not lock you out. Require Attention makes Face ID insist your eyes are open and looking at the screen, which is worth keeping on. The same pane controls which features work without unlocking and whether the device erases itself after ten failed attempts.

Fingerprint and face unlock on Android

Android keeps this under Security, called Security and privacy on Android 12 and later, where you set the screen lock first and then add fingerprints or face unlock. Enrolment takes repeated presses, and adding two fingers from different hands is the practical choice.

Not all Android biometrics are equal. Only sensors that meet the strong classification can authorise payments and unlock app-level keys; the camera-based face unlock on many mid-range phones is convenience-grade and cannot. Ultrasonic and optical in-display readers also behave differently with screen protectors, so re-enrol after fitting one. The Android hub and the iOS versus Android comparison show how the two arrangements differ.

Windows Hello on a PC

Windows puts sign-in options under Accounts, and it insists on a PIN before it will enable face or fingerprint. That PIN is not your Microsoft account password: it is stored locally and bound to the machine's TPM, so it is useless to anyone who steals it remotely.

Facial recognition needs an infrared camera rather than an ordinary webcam, which is why some laptops offer fingerprint only. Dynamic Lock can lock the PC when a paired phone leaves Bluetooth range, and the same pane governs whether Windows requires sign-in on wake. The Windows hub lays the pages out.

Timeouts and lock screen privacy

A lock is only as good as the timeout in front of it. iOS sets Auto-Lock under Display and Brightness; Android pairs a screen timeout with a separate delay before locking; Windows splits screen and sleep timers from the sign-in requirement. Anything longer than a couple of minutes leaves a device unlocked on a desk.

Then decide what the lock screen shows. Notification previews can be hidden until unlocked, which keeps message contents and verification codes off a screen anyone can see. Both phone systems also let you limit what is reachable while locked, such as the wallet, control panel or reply shortcuts, and Android's lockdown option temporarily disables biometrics until the PIN is entered. Full paths per version are in the lock and security guide and the settings finder, and you can explore the real panes in the settings simulator first.