Can a passcode or biometric unlock identify the user?¶

A passcode or biometric unlock can support attribution, but neither automatically identifies the user responsible for every action on the device.

What this means¶

Knowing the passcode shows potential access.

It may indicate familiarity and control, particularly where the code is not widely shared.

But passcodes can be disclosed, observed, guessed, reused or shared between partners, relatives and colleagues.

Biometric access can be stronger evidence of authorised use.

A fingerprint or facial profile enrolled on the device may link a person to the ability to unlock it.

But several biometric profiles may be enrolled. Another person may know the passcode. The device may already have been unlocked when used.

An unlock event also proves only that the device was unlocked through a particular mechanism, if that event is reliably recorded.

The evidential value depends on the question.

But investigators should corroborate with possession, accounts, communications, location, usage patterns and relevant timing.

Avoid attempting to test biometrics or obtain access outside lawful authority and established process.

Unplanned attempts may alter the device, trigger security features or create legal and evidential problems.

What to check or do next¶

• If a person demonstrates knowledge of the passcode, that may support control of the device.
• If specialist examination identifies biometric enrolment, that may support a relationship between the person and handset.

Evidential limits¶

It does not automatically prove who then opened an app, sent a message or created a file.

The operational takeaway is: passcodes and biometrics can support access and control, but they do not prove responsibility for every device action. Use them as part of a wider attribution case.