The paper answers a handful of the most pressing privacy and security related questions that people have had in the weeks following the iPhone X reveal.
"You are giving bad guys more and more incentive to try to compromise that secure enclave", Fu added talking about Apple's decision to store everything sensitive, including Apple Pay data and the Face ID, in once place.
As a result of these and other measures, Apple claims that there's a one in 1,000,000 chance that a random person could unlock your phone with their face (though Apple says this probability is "different" for twins and siblings, and doesn't specify what that probability is). The iPhone X relies on Face ID instead of a fingerprint scanner. Apple's facial recognition technology can adapt to the small changes people's faces undergo over time. In a white paper released today, Apple assures that the "facial matching is performed within the secure enclave using neural networks trained specifically for that goal", which means data never leaves the user data.
Apple was eventually forced to scrap its Touch ID fingerprint scanner for the X because it was hard to incorporate into the new design.
If you're still anxious about Face ID, you can read Apple's entire security guide at this link.
"Third-party apps can use system-provided APIs to ask the user to authenticate using Face ID or a passcode, and apps that support Touch ID automatically support Face ID without any changes", notes the document. If you're having trouble with Face ID, you can select which images you want to send for diagnostics, the company said.
Unlike other tech giants, Apple has always openly talked about its data collection practices, the reasons behind such collection and how it plans to keep that data secure.
Facial recognition information is stored in the same Secure Enclave that fingerprint data is stored. It's smart about how it handles unlock failure, too. Oh, and also, Face ID might not work as well for kids. According to the white paper, the only time Face ID data can leave your device is when you opt in to something called "Face ID Diagnostics".
That's what Apple says.