> For the complete documentation index, see [llms.txt](https://docs.securepass.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.securepass.me/documentation/admin-user-guide/configure-mfa/facial-recognition.md).

# Facial recognition

Facial recognition lets you sign in by looking at your camera instead of typing a password or a code. You enrol once from the Self-Service Portal, and from then on it appears as a sign-in option on the login page.

It needs a camera — the built-in one on a laptop, desktop or phone is fine — and the browser has to be allowed to use it.

## Enrolling your face

Sign in to the Self-Service Portal and open **Authentication modes**. Find the **Face Recognition** card.

![Face Recognition on the Authentication modes page.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/sfVjhkRTcQMUtUhJCoqt/assets/01.png)

If you have not enrolled yet the card reads **Set it up**. Select it.

### What you are agreeing to

Before anything is captured, SECUREpass tells you what it is about to do.

![The Set up Facial Authentication dialog.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/77DOX72JpNUazFJlR0CS/assets/02.png)

Four photos, about thirty seconds. The dialog is explicit that the photos are **sent securely to your organisation's authentication server and are not stored on this device or shared with third parties**.

It also tells you what to expect: a camera permission prompt, an on-screen guide to position your face in, four prompts to follow, and a reminder about lighting.

Read it rather than clicking past it. This is the one place the handling of your biometric data is stated, and if your organisation's policy differs from what it says, that is worth raising before you enrol.

Select **Start enrollment**.

### Capturing the four photos

Your browser asks for camera permission first. Allow it — without it nothing else on this page works.

![Ready to capture.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/ab9O1PkApTM6hbWDuGfI/assets/03.png)

The preview appears with an oval guide. Position your face inside it. The panel on the right shows **Ready** once it can see you, along with the lighting reminder.

Pick somewhere well lit, facing the light rather than with a window behind you. A backlit face is the most common reason enrolment quality comes out poor.

Select **Capture Photos**.

{% stepper %}
{% step %}

### Photo 1 of 4 — Centered

![Photo 1 of 4 — face the camera.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/E3811VQSeGq8HptELwKz/assets/04.png)

Look straight at the camera.
{% endstep %}

{% step %}

### Photo 2 of 4 — Slowly turn your head left

![Photo 2 of 4 — slowly turn your head left.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/IYnYjHapBorZZ10fVNzZ/assets/05.png)

Turn your head, don't move your eyes.

Each photo you have already taken appears as a labelled thumbnail on the right as you go, so you can see the set building up.
{% endstep %}

{% step %}

### Photo 3 of 4 — Slowly turn your head right

![Photo 3 of 4 — slowly turn your head right.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/tuqkysz1hsSUypuFXByK/assets/06.png)

The same, the other way.
{% endstep %}

{% step %}

### Photo 4 of 4 — Look slightly up

![Photo 4 of 4 — look slightly up.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/AmmKAo0zBTBkWBNVjEKQ/assets/07.png)

Tilt your chin up a little.
{% endstep %}
{% endstepper %}

SECUREpass walks you through the four positions one at a time. The counter at the top left tracks where you are in the set, and the prompt above the preview tells you what to do.

Move slowly, and turn your head rather than your eyes. The point of the four angles is to record the shape of your face rather than one flat image, which is what lets it recognise you later at a slightly different angle.

### Reviewing before you submit

All four are shown together before anything is sent.

![Review your photos.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/YWJrvtuaPnjgebYCfQKc/assets/08.png)

Each is labelled — **CENTER**, **LEFT**, **RIGHT**, **UP** — with its own **Retake** link. **Retake all** starts the set again.

Check each one actually shows your face clearly. A blurred or badly lit photo here becomes a sign-in that fails later, and it is much quicker to retake now than to work out afterwards why recognition keeps rejecting you.

Select **Submit** when you are happy with all four.

![Submitting your facial enrollment.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/Wt7vuFFBdNKPSAZSQ0pa/assets/09.png)

Enrolment takes a few seconds. Don't close the window while it runs. When it finishes, the Face Recognition card shows as registered.

## Signing in with your face

At the login page, the usual username and password fields appear first. Facial recognition sits behind **More Login Options**.

![More Login Options on the sign-in page.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/M9tFfnxlDVOm9kequq2A/assets/10.png)

Select it, and the available sign-in methods are listed.

![Choosing Facial Recognition from the sign-in options.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/PK3OQY8M6ze8HW2Lvb0u/assets/11.png)

Choose **Facial Recognition**.

![Position your face inside the oval.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/F5416XizYFqAxyvLXRJN/assets/12.png)

The instructions repeat the two things that matter: get your face inside the oval, and make sure the light is good. The status line beneath the preview reads **Face detected — ready to start** once it can see you.

Select **Start**.

![The countdown before the liveness check.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/xlrLLA569VtiYnCPIZrN/assets/13.png)

A countdown runs, and then the camera starts recording.

![Look at the camera and blink twice.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/WrmrIOYkPQc3iTZ58xGQ/assets/14.png)

The prompt reads **Look at the camera and blink twice**, a red timer in the corner of the preview counts the recording window down, and the status line below says **Recording — please blink naturally**.

Blink the way you normally would. Squeezing your eyes shut or holding them closed is more likely to fail than a couple of ordinary blinks.

That blink is the liveness check, and it is the part that matters for security. Recognising a face is not enough on its own — a photograph of you would pass that. Asking for a live blink is what distinguishes you from a picture of you.

![Verifying.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/Jw6M558j74sLjdKi1821/assets/15.png)

When the recording window closes, SECUREpass verifies what it captured against your enrolled photos. It takes a couple of seconds — don't close the window while it runs.

Once verification succeeds you are signed in.

![Signed in.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/IUFynb0Js4GrsXJEpROv/assets/16.png)

## If it does not work

| What you see                                | Usually means                                                                                                     |
| ------------------------------------------- | ----------------------------------------------------------------------------------------------------------------- |
| No camera prompt at all                     | The browser has already been told no. Clear the camera permission for this site in browser settings and try again |
| **Face detected** never appears             | Too dark, too backlit, or the camera is covered                                                                   |
| Recognition fails repeatedly                | Enrolment quality. Re-enrol from the Self-Service Portal in better light                                          |
| The option is missing from the sign-in page | Facial recognition is not enabled for your account — ask your IT team                                             |

If none of that helps, sign in with another registered method and contact your IT team. Keep a second method enrolled for exactly this reason.