Apple just dropped a detailed, six-page white paper entitled “Face ID Security” ahead of the iPhone X launch in November. In the security document, Apple explains how facial recognition with Face ID on iOS will work, how safe it is as biometric security, and what issues it may have for users.

The security paper opens with an overview of how Face ID works on the iPhone X:

When using Face ID, Apple says your passcode (which is required as a fallback) is still used in these cases:

  • The device has just been turned on or restarted.
  • The device hasn’t been unlocked for more than 48 hours.
  • The passcode hasn’t been used to unlock the device in the last 156 hours (six and a half days) and Face ID has not unlocked the device in the last
  • 4 hours.
  • The device has received a remote lock command.
  • After five unsuccessful attempts to match a face.
  • After initiating power off/Emergency SOS by pressing and holding either volume button and the side button simultaneously for 2 seconds.

Apple says Face ID will kick back to the passcode after five failed attempts (like the iPhone X demo) just like Touch ID and fingerprint recognition. The white paper echoes Apple’s claim about Face ID security compared to Touch ID, and includes an interesting tidbit about kids using the iPhone X unlock feature:

In those cases, Apple recommends relying solely on the passcode option and not Face ID which is a step backwards from Touch ID.

When using Face ID with Apple Pay, the iPhone X will work like the Apple Watch by requiring you to confirm intent by first clicking the side button twice which is a new requirement for the iPhone.

Apple also notes that Face ID can be used for diagnostics, but only at your request:

You can read the full white paper here. Apple has also refreshed its privacy website for customers with a new look and updated information. Apple has also discussed Face ID and privacy in interviews following the iPhone event.

As part of setting up Face ID Diagnostics, your existing Face ID enrollment will be deleted and you’ll be asked to re-enroll in Face ID. Your iPhone X will begin recording Face ID images captured during authentication attempts for the next 7 days; iPhone X will automatically stop saving images thereafter. Face ID Diagnostics doesn’t automatically send data to Apple.

The all-new iPhone X will be available for pre-order on October 27 and ships from $999 on November 3.