Face ID for Notes on iPhone: Setup, Limits, and Alternatives

Quick answer: Face ID does not decrypt your notes. It unlocks access to the password that does. That distinction matters because when Face ID fails — in sunglasses, after five failed attempts, or on a device restart — you fall back to the real key: your passcode or master password. Face ID is convenience; the passcode is security.

How does Face ID unlock a locked note?

When you set a password on a note (in Apple Notes or Secure Notes) and enable Face ID, the app stores the note password in the iOS Keychain and tags the entry with a biometric-protected access policy. To unlock the note, the app asks the Keychain for the password; the Keychain asks the Secure Enclave whether biometric authentication succeeded; if yes, the password is released and used to decrypt the note.

Three consequences of this architecture:

• Face ID never sees or stores your note password. It only gates release of the password from the Keychain.
• Face ID data never leaves the Secure Enclave — not even to Apple, not even to the app.
• If biometric matching fails repeatedly, iOS demands the device passcode. Apps can also require the note-specific password as an additional fallback.

When does iOS force you to use the passcode instead?

Face ID is intentionally restricted in specific situations. Knowing them saves panic when Face ID “stops working.”

• After the device restarts or powers on.
• When the device has not been unlocked for more than 48 hours.
• After five consecutive failed Face ID attempts.
• When you hold the side button and volume-up button for two seconds (the SOS / lockdown gesture).
• After receiving a remote lock command from Find My.

In all of these cases, only the device passcode unlocks the Secure Enclave and re-enables Face ID. This is a feature, not a bug — it prevents an attacker from capturing an unconscious user's biometric to bypass security.

How do I set up Face ID for Secure Notes?

1. Open Secure Notes and tap Settings.
2. Under Security, enable Face ID (or Touch ID on supported devices).
3. Authenticate with Face ID once to confirm. iOS will prompt to store the master password in the Keychain with biometric policy.
4. Close the app and reopen it. Secure Notes should prompt for Face ID on first open after a session timeout.

For per-note passwords different from the master, repeat the same flow on the individual note — Secure Notes asks if you want to use Face ID for that specific entry.

What fallback should I set when Face ID fails?

Biometric fallback is the single most common cause of locked-out users. Set three layers before you trust Face ID with anything important:

• Device passcode. Make it six digits minimum; alphanumeric is stronger still. This unlocks Face ID after timeouts.
• App master password. Distinct from the device passcode. This decrypts Secure Notes' database.
• 12-word recovery seed. Written on paper, stored somewhere outside the device (a safe, a safety deposit box, trusted family). This is your only way back if the master password is forgotten.

Without all three, a single broken Face ID camera or a sunburned forehead is enough to lock you out of credentials you cannot recover.

Is Face ID secure enough for really sensitive notes?

For nearly every user, yes. Apple reports a 1-in-1,000,000 false positive rate for Face ID, versus roughly 1-in-50,000 for Touch ID. Neither is the attack surface that matters — a motivated attacker with physical access will go after the passcode or recovery flow, not attempt to fool the camera.

The rare situations where Face ID is not the right unlock:

• You share a household with someone who might use your phone face-down or while you're asleep.
• You work in adversarial environments (journalists, activists, legal clients) where biometric unlock under duress is a threat model.
• You're crossing a border where unlock might be compelled. (Passwords get more Fifth Amendment protection than biometrics in US case law as of early 2026 — jurisdiction matters.)

In those cases, disable Face ID for the sensitive app and fall back to the master password each time. You can also use the iOS SOS gesture to instantly require passcode before anything else unlocks.

Common Face ID problems with locked notes

• “Face Not Recognized” every time.Usually solved by adding an alternate appearance in Settings → Face ID & Passcode. Glasses, beards, and lighting shifts all benefit from this.
• Face ID works but note stays locked. Means the Keychain entry was wiped. Re-enter the master password in Secure Notes; the Keychain entry is re-created with biometric policy.
• Face ID not offered at all.Check Settings → Face ID & Passcode → Other Apps and confirm Secure Notes is allowed. The toggle gets flipped after iOS updates sometimes.

Further reading

For the full lock-and-unlock flow, read how to lock notes on iPhone. If you're still picking an app, see Secure Notes vs Apple Notes for the practical tradeoffs.