There's no single "safest" unlock method. Each one is strong against some threats and weak against others. What matters is matching the method to the person you're worried about.
The main threats
- Guessing: someone tries likely combinations.
- Shoulder-surfing: someone watches you unlock.
- Smudges: the screen shows where your finger has been.
- Coercion: someone makes you unlock it.
How each method holds up
| Method | Guessing | Shoulder-surfing | Smudges | Coercion |
|---|---|---|---|---|
| 4-digit PIN | Weak | Weak | Medium | Weak |
| 6+ digit PIN | Medium | Weak | Medium | Weak |
| Long password | Strong | Medium | Strong | Weak |
| Pattern (6+ dots, irregular) | Medium–Strong | Weak | Weak | Weak |
| Face ID / Touch ID | Strong | Strong | Strong | Very weak |
The biometric catch
Face ID is excellent against strangers and terrible against anyone who can point your phone at your face. In many places you can also be legally required to unlock with a biometric when you couldn't be forced to reveal a code. Biometrics are a convenience layer, not a vault key.
Making a pattern strong
- Use six or more dots.
- Don't start in a corner. Most people do, and attackers try those first.
- Change direction at least twice. Avoid letters and simple shapes.
- Wipe your screen now and then, since smudge trails are real.
- Draw with your hand angled to cover the screen when others are near.
Why Veilbox uses a pattern anyway
A pattern is fast and easy to remember, and in Veilbox it's not compared against anything. It's turned straight into an encryption key (how that works). Combined with deniable vaults, even coercion has limits: you can open a vault without revealing that others exist.
Try Veilbox free
Encrypted on your iPhone. No account required.