Face ID Alternate Appearance: Should You Add a Second Person's Face?

What Alternate Appearance actually is

Alternate Appearance is a setting inside Face ID & Passcode, reached at Settings > Face ID & Passcode > Set Up an Alternate Appearance, that lets the TrueDepth camera learn a second face and treat it as an equally valid match. Apple designed it for a single person whose own look changes dramatically, for example switching between a full beard and clean-shaven, or between everyday makeup and none, so Face ID keeps recognizing "you" under both conditions (Apple Support).

Nothing in the setup flow asks whose face this is. The system has no concept of "primary owner" versus "secondary user." Once a second face is enrolled, iOS treats it exactly like your own: there's no separate account, no reduced permission set, and no log distinguishing which face unlocked the phone at any given moment.

What full Face ID access actually unlocks

Apple states plainly that Face ID is used to authorize unlocking the device, approving Apple Pay payments, and confirming purchases from the App Store, Book Store, and other Apple media services, and that developers can let their own apps use Face ID to sign in as well (Apple Support).

In practice, once someone's face is enrolled as an alternate appearance, they can do everything you can with a glance:

There's no partial mode. A second enrolled face is a second key to the entire device, not a guest pass to one app.

• Unlock the home screen and open any app that doesn't have its own separate lock.
• Approve Apple Pay purchases and in-app or App Store purchases.
• Sign into banking, email, and password-manager apps that use Face ID as their unlock method.
• View Messages, Photos, browser history, and anything else visible once the phone is open.

Why this catches people off guard

The setting reads like a convenience feature, and for its intended purpose it is one. The confusion is that Apple doesn't frame it, inside the setup flow itself, as "grant someone else full access to this iPhone." People discover the real scope only after the fact, which is why questions about it show up regularly in Apple's own community forums from users who either added a partner's face and want to understand the consequences, or suspect someone added a face without their knowledge.

Enrolling another adult's face is usually a mutual, visible decision between two people who trust each other with full access anyway, similar to sharing a passcode. The risk case is different: someone else enrolling their own face on your phone during a moment you handed it over, without telling you. Because Face ID gives no on-screen indicator that a second face exists, that kind of silent addition isn't something you'd notice just by using the phone normally.

How to check and remove an alternate appearance

If you want to confirm what's enrolled or undo it, Apple's guidance is to reset Face ID entirely rather than selectively delete one of the two faces: go to Settings > Face ID & Passcode, then tap Reset Face ID. This clears every enrolled appearance, and you re-enroll your own face from scratch (Apple Support). There's no view that shows you a "face #1" and "face #2" separately, so if you suspect an unauthorized appearance was added, resetting is the only way to clear it out completely.

A safer way to share access selectively

If the actual goal is "let my partner see specific photos" or "let my kid use the camera without seeing my messages," a full Alternate Appearance grant is more access than the situation calls for. A private photo vault app like Secure Folder: Incogni Vault addresses that narrower need directly: it moves chosen photos, videos, files, and notes out of the Photos app into a hidden gallery locked behind its own PIN or Face ID, completely separate from your phone's own unlock method. Sharing the phone itself, or even adding someone else's face to the phone's own Face ID, doesn't touch what's inside that separate vault. Secure Folder also includes a decoy vault, a second PIN that opens a harmless-looking, entirely separate vault with no indication the real one exists, which is a closer match for "give someone limited access" than handing over full-device Face ID ever is.

For content already stuck in Apple's built-in Hidden album, it's worth knowing that album unlocks with the exact same Face ID as the rest of the phone, including any alternate appearance you've added, since it isn't a separate lock the way a dedicated vault app is.