{"id":48252,"date":"2016-03-11T15:12:16","date_gmt":"2016-03-11T23:12:16","guid":{"rendered":"https:\/\/blogs.mcafee.com\/?p=48252"},"modified":"2025-08-15T07:35:59","modified_gmt":"2025-08-15T14:35:59","slug":"fingerprint-scanner-security","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/mobile-security\/fingerprint-scanner-security\/","title":{"rendered":"An Inkjet Printer is All You Need to Hack a Smartphone\u2019s Fingerprint Scanner"},"content":{"rendered":"

No two fingerprints are alike. It\u2019s an undisputable fact that\u2019s allowed humanity to make huge strides in criminal justice, record-keeping, and even fortune telling. But one of the greatest advantages of our distinguishable digits? They\u2019re helping us log in to our smartphones securely, via fingerprint scanners.<\/p>\n

Now for the twist: turns out it\u2019s surprisingly easy to make copies of fingerprints. That means new opportunities for hackers to break into smartphones<\/a> that rely on this form of authentication.<\/p>\n

Several phones were recently unlocked<\/a> through their fingerprint scanners, when security researchers printed fingerprints on inkjet printers. Although this technique first surfaced in an academic paper<\/a>, it has since even been featured in a demonstrative How to Hack a smart phone <\/a>.<\/p>\n

To pull this off, a perpetrator only needs two tools. They need to purchase 1) any ordinary inkjet printer and 2) electricity-conducting specialty ink. Both are easily available on the Web at a cheap price. The smartphone owner\u2019s fingerprints would also need to be captured on an image file, then printed with these tools, in order to work. So the real challenge for cybercriminals would be stealing the fingerprint in the first place.<\/p>\n

It may sound far-fetched, but stealing fingerprints isn\u2019t an impossible feat. In 2014, hackers used photographs of the German Defense Minister to reproduce hers<\/a>. It\u2019s also key to remember that this day in age, our medical and personal data is more vulnerable than ever. Stories appear every day about hacks on hospitals, universities, and businesses hosting the sort of data we use to log in to our devices. In one such act, when the Office of Personnel Management was breached last year, the fingerprints of 5.6 million government employees<\/a> were stolen.<\/p>\n

Just think about it: we all have fingerprints stored in some database, somewhere. In addition, many of us have photos of our hands on the Web\u2014which are likely available to the public.<\/p>\n

We are entering an era where biometric data is becoming a substitute for passwords<\/a>. True, these features are unique for each person. But they may also be available for others to copy. Biometric security concerns are currently a highly debated topic among legal institutions and businesses. But what about the effects on users themselves? For us, the truth is, copying fingerprints isn\u2019t the first instance of biometric hacking, and it won\u2019t be the last.<\/p>\n

In all of history, no other human has had your fingerprints. They\u2019re completely unique to you, making them a serious factor in your personal identification. But fingerprint scanners alone are no longer enough to log in to devices securely.<\/p>\n

Tips to Stay on Top of Secure Authentication<\/h2>\n

So, as passwords are on their way out, what can you do to stay on top of secure authentication?<\/p>\n