Set up lock screen and biometrics the right way

Biometrics are a convenience layer. A strong PIN or password underneath is still what protects the phone if face or fingerprint unlock fails.

The right order

  1. Set a strong device passcode/PIN/password.
  2. Add fingerprint or face unlock.
  3. Shorten the auto-lock timer.
  4. Review lock-screen notification previews.
Device unlock phone settings illustration
Passcode/PIN first, biometrics second. UI varies by brand and OS version.

Android setup

  1. Settings → Security & privacy → Device unlock.
  2. Set PIN, pattern, or password. Prefer a longer PIN over 1234.
  3. Add fingerprint or face unlock.
  4. Register an alternate finger (left hand / index) for awkward angles.

iPhone setup

  1. Settings → Face ID & Passcode (or Touch ID & Passcode).
  2. Set a passcode that is not your birthday.
  3. Enroll Face ID / Touch ID in normal lighting.
  4. Add an alternate appearance if your face changes with glasses or beard patterns and the OS offers it.
Privacy & Security phone settings illustration
Face ID & Passcode sits under Privacy & Security settings paths. UI varies by brand and OS version.

Lock-screen privacy

Habits that matter more than fancy settings

Passcode quality without making life miserable

A six-digit PIN is far better than 123456. A longer alphanumeric passcode is stronger still if you can type it rarely—biometrics handle the daily unlocks. Avoid using the same PIN as your ATM card if you can help it.

Biometrics enrollment tips

Stolen Device / strong lock features

Newer iOS and Android releases continue to add stolen-device protections that require biometric authentication for sensitive account changes after the phone leaves familiar locations. Turn those on when offered. They close a gap where a thief who somehow learned your passcode could change your Apple ID or Google password.

Guest access without sharing your face or PIN casually

Do not enroll other people’s fingerprints “just for today.” If someone needs a call, place the call yourself. For kids’ entertainment, prefer Guided Access / screen pinning where available rather than teaching them your device code.

After a screen replacement

Biometrics sometimes need re-enrollment after hardware service. Set aside five minutes to register Face ID or fingerprints again instead of leaving the phone on an easy temporary PIN.

Lock screen FAQ

What if Face ID fails with masks?
Use passcode or enroll options your iOS version supports. Do not disable the passcode.
Is a pattern safe on Android?
Longer patterns are better than tiny ones; a strong PIN/password is still preferable for many people.
Should biometrics unlock password managers?
Convenient but optional—follow your threat model.
What if my sibling knows my PIN?
Change it. Shared PINs defeat the model.

Related guides