Following the launch of Vision Pro, Apple shared more details about the headset’s OpticID implementation of iris verification. OpticID can identify the uniqueness of the user's iris (the colored part of the eye), allowing it to quickly unlock VisionPro, authorize Apple Pay purchases, log in to many third-party applications, access sensitive personal data, and more.
Apps on iPhone and iPad that support FaceID and TouchID automatically support OpticID. After setting up OpticID, Persona must also be used.
Apple said: "Touch ID revolutionized fingerprint authentication, Face ID revolutionized facial recognition authentication, and Optic ID revolutionized iris recognition authentication. Optic ID leverages the uniqueness of the iris to provide intuitive, secure authentication, made possible by the high-performance eye tracking system of Apple Vision Pro's LED and infrared cameras."
OpticID scans both eyes by default. Given that the size of a person's irises and pupils changes under different lighting conditions, OpticID will make adjustments by updating previously registered templates after each successful verification. Apple ensures that all biometric data is encrypted and never backed up to iCloud or anywhere else.
There is an accessibility option for using OpticID with only one eye that can be turned on under Accessibility → Eyeball Input in the Settings app. OpticID can also be turned off completely, in which case only passwords can be used for authentication.
For users who need vision correction, OpticID works with VisionPro’s ZEISS optical lenses and prescription soft contact lenses.
Apple says: "When you set up Optic ID, spatio-temporally modulated eye-safe near-infrared light illuminates your eyes so that the Apple Vision Pro eye camera can capture an image of your iris. The iris image data is sent to the Secure Enclave and the nerves of the Apple M2 chip engine (which is protected in the SecureEnclave) and processed in the SecureEnclave. When you authenticate with OpticID, the authentication attempt uses the same procedure to compare your iris to the registered biometric data to determine if there is a match.
Apple said the OpticID system complies with international safety standards and "will not cause damage to eyes or skin due to the low output power of the transmitter."
Apple says the chance of a random person unlocking Vision Pro using OpticID is less than one in a million, similar to FaceID. The company explains that OpticID matches "detailed iris structure in the near-infrared domain," "revealing highly unique patterns that are independent of iris pigments."
OpticID allows up to five unsuccessful matching attempts before requiring a password. As an added layer of protection, users can set VisionPro to delete all messages, media and personal settings after 10 consecutive failed password attempts.
A password is also required in the following situations:
The device has just been turned on or restarted.
The device has been unlocked for less than 48 hours.
The passcode has not been used to unlock the device in the past six and a half days, and OpticID has not unlocked the device in the past four hours.
As Apple explains in its support document about setting up and using OpticID, you can still use OpticID in these situations if your iPhone is nearby.