What Is Template-Free Face Authentication?

Template-free face authentication is a passwordless method that verifies a live person by face while storing no biometric template and no face image, keeping only a sealed, non-reversible token.

The defining idea is what is not kept. Traditional biometric systems store a mathematical template, or the raw image, so they can re-match a face later. Template-free face authentication removes that stored template entirely and retains only a sealed, unlinkable, non-reversible face token that contains no PII and cannot be turned back into a face, so there is no reusable biometric to breach, leak, or subpoena.

Template-free face authentication works by enrolling a user from a photo on file, matching their face on the device at sign-in, and storing only a sealed token, never the image or a reusable template. In the SenseCrypt implementation the passkey answers "is this the right device?" and the on-device face check answers "is this the right, live person?" without ever banking a template someone could steal.

Template-free face authentication differs from traditional facial recognition because it stores no reusable biometric template or image, only a sealed, unlinkable token that even the vendor cannot reverse.

The row that exposes the difference is "Stores a biometric template or face image?" Template-free face authentication answers No, so there is no biometric honeypot to breach, leak, or subpoena, and face matching still runs on the device rather than in a central store.

Template-free face authentication is designed to be biometric-blind: because no face image or template is retained, there is no reusable biometric database to breach, leak, or subpoena.

This matters because credentials remain a leading breach vector, with stolen credentials and phishing featuring in a large share of reported breaches. Removing both the password and the stored biometric shrinks that attack surface. Higher-assurance guidance treats biometrics as a factor to handle with care; keeping only a non-reversible token, rather than a template, sidesteps the storage risk that guidance is concerned with.

Template-free face authentication, as implemented by SenseCrypt, is independently proven: its face recognition is evaluated in NIST FRTE and its liveness holds iBeta ISO 30107-3 certification. These are third-party, name-attributable proofs rather than self-reported claims, the strongest evidence a buyer can cite for a template-free approach.

Template-free face authentication fits into an identity provider as the person-proving factor, paired with a FIDO2/WebAuthn passkey that proves the device, then delivered through standard federation protocols.

SenseCrypt is a full IdP: it speaks OIDC, OAuth 2.0 (with PKCE and PAR), SAML 2.0, SCIM 2.0, and CIBA, with RBAC, audit logs, and multi-tenant isolation, and it integrates through standard metadata files and discovery URLs. That makes template-free face authentication usable for customer identity (CIAM), workforce SSO, and B2B SaaS SSO across regulated industries.

Template-free face authentication was pioneered by SenseCrypt, the passwordless identity platform from Seventh Sense, a Singapore deep-tech company that verifies the live person rather than just the device.

SenseCrypt is available at a flat $1 per user per month, with a 30-day free trial that requires no card, and a roughly 60-second live demo shows the template-free face login end to end.