Apple’s HomeView Tries Face Authentication Without FaceID

Apple's HomeView, which debuts on Friday, is a smart home device—think of it as an iPhone-Apple Watch hybrid sitting on your counter—that can be personalized for up to six people and connected to each of their iCloud accounts. Using ambient face and voice data, it is designed to seamlessly switch between users while maintaining each of their privacy.

The device allows users to ask about their schedule and movie recommendations but prevents access to others' private information like travel plans or text messages. This represents a significant departure from Apple's traditional biometric authentication methods.

HomeView doesn't rely on Apple's battle-tested FaceID or TouchID. Instead, it uses new 'person recognition' technology built off an Apple architecture for securing sensor data. The device still checks for face and voice before accessing iCloud data and requires an iPhone or iPad on the same Wi-Fi network that has been recently unlocked.

Secure Exclave Architecture

Apple concluded that FaceID wasn't suitable for HomeView because the device needs to quickly switch between users and relies on AI processing that can't all fit into the Secure Enclave. Instead, HomeView uses Apple's recently announced Secure Exclave (note the 'x') to handle video and audio data for user identification.

The Secure Exclave is a dedicated, memory-protected space in recent Apple processors, found in the S11 chip for Apple Watch Series 12 and Apple Watch Ultra 4, as well as the A20 Pro chip for iPhone 18 Pro and iPhone Duo. Early versions were already in place for the iPhone 16 and 17 and MacBook Neo.

Security Implications

While Apple argues the Secure Exclave is robust and expands the company's security capabilities, the new architecture creates more opportunities for potential vulnerabilities. Both law enforcement and exploit brokers consistently attempt to break Apple's on-device defenses.

HomeView's 'person recognition' technology is less comprehensive than FaceID and may be more susceptible to 3D depth map attacks and voiceprint attacks. The device uses the Secure Exclave to govern the indicator light for camera and microphone activity, isolating this process to make it harder for attackers to disable it.

Users can opt for guest mode or a less personalized mode that only shares playlists without accessing calendar or Messages data. As Apple integrates more AI features, HomeView's departure from FaceID provides insight into the scale of changes the company is planning.