The report said its journalists were able to unlock Pixel 4 multiple times with Face Unlock while their eyes were shut, potentially giving someone other than the owner access to the device. Apple’s iPhone uses similar technology but it does not work if someone’s eyes are closed.
“The obvious issue seems to be that you could use it when someone is sleeping or even dead,” said Nasir Memon, a professor and founder of NYU Tandon School of Engineering’s cybersecurity program.
Google warns on its Face Unlock support page that the feature could be misused: “Your phone can also be unlocked by someone else if it’s held up to your face, even if your eyes are closed.” It recommends storing the phone in a front pocket or a handbag and in “unsafe situations,” turning off face unlock entirely.
The company’s new phones aren’t yet available to the public quite yet: the Pixel 4 and 4 XL ship October 24.
If Face Unlock ships without a fix, the line features an option to temporarily turn off the feature. For added security, users can turn on “lockdown mode” via Settings to require a PIN, pattern or password instead.