TL;DR
Voice passwords authenticate your identity using the unique characteristics of your voice. Setup follows three steps — record, program, and identify — to create a voice credential without memorizing anything. Key benefits include simplicity, ease of use, and strong security. However, two notable risks exist: deepfake audio technology can potentially fool authentication systems, and natural voice changes over time may cause access failures. For strongest protection, voice biometrics work best as one layer within a multi-factor authentication strategy.
Why are voice-based security controls becoming more common?
Voice password usage is relatively low, when compared to traditional (typed) versions. But this technology could be coming to an account near you. Almost 40 percent of Internet users use a voice assistant (like Alexa) each month. We bark into our computers, speakers, and handheld devices, and we get the results we want. That same technology could be used to unlock your phone, open your bank account, or more.
How do voice passwords work?
A recording starts the voice biometry process. With that data, you'll use your voice to unlock your access.
Most voice authentication systems rely on computer programming. You will:
- Record. You'll say a predetermined sentence a few times, or you'll speak normally into a microphone.
- Program. The system identifies unique identifiers within your voice.
- Identify. With that data, you have created a voice password.
What is text-independent speaker verification?
In the future, programmers may create text-independent speaker verification. Your device will listen in as you speak normally in a variety of contexts. That information will create your voice identifier (ID).
What are the benefits of voice biometry?
Your typed passwords may seem adequate for now. Why should you set up a voice password?
These three benefits may entice you:
- Simplicity: You don't need fancy software to help you remember your password, and you don't need a high-end microphone to record the data. You have everything you need within your device.
- Ease: About 70 percent of consumers say biometrics (like voice passwords) are easier than traditional versions.
- Security: Your voice is as unique as your fingerprint, and it's harder to steal. When combined with another factor (such as a traditional password), voice versions do help you secure your account.
What are the security drawbacks of voice passwords?
A voice password is almost impossible to steal, and someone who attempts to mimic you may be soon locked out of your accounts.
Can deepfakes defeat voice authentication?
But so-called deepfake programs are in progress that can fool even sophisticated computers. For example, the algorithm researchers made to detect deepfakes on Facebook was only right about 65 percent of the time. As these programs become more effective, theft is likely.
What happens when your voice changes over time?
Your voice can also change with time, especially if you smoke. You may need to re-record your message periodically, or you could get locked out of your own accounts. That could be a security nightmare.
Voice passwords could be part of a robust multi-factor authentication process. Find out more about how these can help you keep your assets safe.
Frequently asked questions
What makes a voice password different from a traditional password?
Unlike typed passwords that rely on memorized strings of characters, voice passwords authenticate you using the unique acoustic and physiological characteristics of your voice — no recall or manual input required.
How is a voice password initially set up?
Setup involves speaking a predetermined phrase into your device's microphone several times. The system then analyzes your voice to extract unique identifiers, which become the basis of your voice credential.
Can someone steal or replicate my voice to gain access?
While voice passwords are inherently difficult to steal, deepfake audio technology poses a growing threat. Research has shown that even purpose-built detection algorithms can fail to identify synthetic voices a significant portion of the time.
What happens if my voice changes over time?
Factors like illness, aging, or smoking can alter your voice enough to cause authentication failures. To avoid being locked out, users may need to periodically re-record their voice profile.
Is a voice password secure enough to use on its own?
Voice biometrics offer a strong layer of security, but they are most effective when combined with at least one additional authentication factor, such as a traditional password, as part of a multi-factor authentication strategy.
How do voice passwords compare to other biometric authentication methods?
Like fingerprint or facial recognition, voice passwords rely on a physical characteristic unique to each person. Voice biometrics stand out because they require only a microphone — hardware already built into most devices — making them accessible without specialized sensors. However, unlike fingerprints, a person's voice can change over time due to factors such as illness or aging, which may require periodic re-enrollment.
References
50+ Voice Search Stats to Help You Rethink Your Strategy in 2021. (November 2021). TechJury.
Consumers Ready to Switch from Passwords to Biometrics, Study Shows. Visa.
Deepfakes Aren't Very Good. Nor Are the Tools to Detect Them. (June 2020). Wired.
