Access Locked Apps in iOS 18 Without Face ID

Apple’s iOS 18 introduced native app locking, enabling users to secure individual applications behind Face ID, Touch ID, or the device passcode. When biometric authentication fails or is temporarily unavailable, iOS 18 provides a direct secondary authentication fallback: the device passcode. This article explains how this fallback mechanism works, its limitations, and what it means for your overall device security.

The Passcode Fallback Mechanism

Yes, locked apps in iOS 18 can be accessed using secondary authentication if biometric scans fail. When you attempt to open a locked app, iOS 18 immediately triggers a Face ID or Touch ID scan. If the sensor fails to recognize your face or fingerprint after consecutive attempts—or if the camera/sensor is obstructed—a prompt appears allowing you to enter your iPhone's device passcode. Tapping this option and providing the correct passcode instantly grants access to the app.

No Independent App Passwords

A critical detail of the iOS 18 app locking system is that it relies entirely on your iPhone’s existing security credentials. Apple does not allow users to create separate, unique PINs or alphanumeric passwords for individual apps. Because the device passcode serves as the sole secondary authentication method, anyone who knows the passcode to unlock your phone can also unlock any secured app on that device.

Interaction with Stolen Device Protection

If you have Stolen Device Protection enabled, iOS generally enforces stricter biometric requirements for sensitive actions—such as accessing passwords in Keychain or erasing content—when away from familiar locations. However, standard locked apps still permit passcode entry as a fallback when biometrics fail. This ensures that legitimate users are never permanently locked out of essential communication, banking, or productivity tools due to sensor malfunctions or environmental conditions.

What Happens When Biometrics Are Disabled

If Face ID or Touch ID is disabled system-wide, or if the device has just restarted and requires a passcode to enable biometrics, locked apps will bypass the biometric prompt entirely. In these scenarios, the system immediately asks for the device passcode upon opening the secured app, ensuring seamless access without interruption.