Affiliate Disclosure
If you buy through our links, we may get a commission. Read our ethics policy.

Courts predicted to side with law enforcement on fingerprint warrants for Apple's Touch ID

In a select number of cases, authorities have been able to compel courts to force criminal suspects to unlock their Touch ID-equipped iPhone using their fingerprint. That security bypass is likely to continue, legal experts say, because capturing someone's fingerprint is a well-established practice in investigations.

Experts who spoke with Bloomberg suggested it's only a matter of time before a lawsuit is filed over forcing a suspect to unlock their iPhone with their fingerprint. And if and when that does happen, courts are expected to come down on the side of law enforcement.

While entering a password or passcode requires use of a "mental process" that could violate the Fifth Amendment, using someone's fingerprint is not likely to earn the same protection. That's because investigators have long used physical evidence, such as fingerprints or blood, to solve crimes.

Earlier this month, a Los Angeles court ordered a woman to unlock her iPhone with Touch ID in order to aid the FBI in an investigation. The bureau obtained a proper court warrant forcing the suspect to provide her print.

Rahul Gupta, senior deputy district attorney in Orange County, Calif., told Bloomberg he believes it's only a matter of time until a higher court sets precedent on the matter, and likely sides with law enforcement. If that happens, compelling criminals to unlock their iPhone with Touch ID could become more commonplace.

Of course, Touch ID isn't a foolproof way for investigators to get into a user's iPhone — Apple's own security methods require that users re-enter their passcode if the handset is rebooted or hasn't been unlocked for 48 hours. That means authorities will be forced to work quickly after apprehending a suspect and obtaining their iPhone if they want to unlock it.

The FBI has been managing to crack into some iPhones, most notably the iPhone 5c involved in the San Bernardino, Calif., terrorist attack. But the iPhone 5c notably does not include Touch ID nor the associated secure enclave, which makes it even tougher to crack.

It's likely the technique used by the FBI to unlock the iPhone 5c in that case would not work with newer models featuring Touch ID and the secure enclave, starting with the iPhone 5s. In those cases, obtaining a warrant for the suspect's fingerprint —  and quickly —  may be the best option.



32 Comments

🎄
emoeller 17 Years · 590 comments

Simple solution is for Apple to allow a single fingers print to wipe the phone.   Similar system should be put in place at ATM's, such that a single incorrect code would lock the account (helpful in cases where individuals are forced to withdraw money).

🌟
eideard 16 Years · 427 comments

Americans - very slowly of course - are beginning to understand what the term "police state" means.

🎄
vukasika 10 Years · 103 comments

This is BS sidestep that forces self-incrementation.  So you have a right not to incriminate yourself and cannot be compelled to give up your password but you can be compelled to give your finger print.  Complete BS.

❄️
mac_128 12 Years · 3452 comments

emoeller said:
Simple solution is for Apple to allow a single fingers print to wipe the phone.   Similar system should be put in place at ATM's, such that a single incorrect code would lock the account (helpful in cases where individuals are forced to withdraw money).

Too easy to wipe your iPhone that way. Maybe a finger that puts the phone into password mode. That way if you do lock it up accidentally, you can just enter the password to unlock it.

theres still a problem, because the Police are likely to get wise to that and force you to use the most logical fingers too, not the atypical lock finger. And of course for those who fear being put into that situation, they can use a non-standard finger to unlock their phone and make all others lock fingers, thus complicating their daily use of the iPhone. Oh well, the cost of engaging in criminal activities.

i do like the poison pill option of making a custom password a wipe password. That way, if the law ever compels entering a password, a wipe password can be entered. Or, if using a hacked brute force method, there's a 50/50 chance they will wipe the phone before they unlock it.

🎁
SpamSandwich 19 Years · 32917 comments

This sentence (as written) is incorrect:  

"While entering a password or passcode requires use of a "mental process" that could violate the Fifth Amendment..."

Presumably, the author meant "one being forced to enter a password..."?