Face Unlock

Configure Face Unlock on the Access Station Pro (AF64) and enroll users

Face Unlock is an access method that lets users unlock a device by walking up to it and looking at it. It uses facial recognition technology to verify a user’s identity and an infrared 3D sensor to protect against spoofing attempts, such as someone using a photo or mask of an authorized user to gain access.

Enable Face Unlock for your organization and devices, then enroll users with face credentials so they can unlock doors using the Access Station Pro (AF64).

---

Enable Face Unlock for the organization

You need Access System Admin permissions to enable Face Unlock.

1

In Verkada Command, go to All Products > Access.

2

In the left navigation, select Access Settings.

3

Toggle on Enable Face Unlock.

---

Configure Face Unlock on the device

To enable Face Unlock for a specific device:

1

In Verkada Command, go to All Products > Devices.

2

Select your device.

3

Click Settings.

4

Toggle Face Unlock on.

5

Once Face Unlock is enabled, the following settings are available:

• Face Unlock Detection Distance: Configure how far away a user can be detected before the door unlocks.

  • Near: Detects users up to ~0.7 m from the device.

  • Far: Detects users up to ~1.5 m from the device.

For crowded or narrow spaces, or high-security doors, use Near to reduce accidental unlocks.

• Face Unlock Cooldown: Sets the period during which the same user cannot be detected again. This cooldown only applies per user; different users can unlock consecutively.

---

Configure Face Unlock for users

For a user to access a door using Face Unlock, they must have a face credential. A face credential is an access credential with a unique numeric representation that authenticates the user on the device via facial recognition. You can create a face credential from a photo in several ways:

• Copy the user's existing profile photo

• Take or upload a new photo

• Invite the user to upload a photo via SMS or email

Any photo uploaded using these methods must meet Face Unlock photo guidelines. Ensure the photo is sharp and well-lit, with the face clearly visible, facing straight forward, and showing a neutral expression.

These options can be completed for individual users or in bulk using a user CSV import or Verkada's public API.

Individual

1

In Verkada Command, go to All Products > Access.

2

Select Access Users and Groups.

3

Select the user you want to enable Face Unlock for.

4

Toggle on Face Unlock.

5

Choose an enrollment method:

• Copy the user's profile photo

• Take or upload a new photo

• Invite the user to upload their own photo via SMS or email

  • The user receives a message with a link to set up Face Unlock, and the invitation remains active for 48 hours for them to upload their photo.

Bulk

You can enable Face Unlock in bulk via Command, CSV import, or the Verkada public API.

Command

To enable Face Unlock in bulk within Command—either by copying users' existing profile photos or sending invitations to upload their own photos:

1

In Verkada Command, go to All Products > Access.

2

Select Access Users and Groups.

3

Select the checkbox next to every user you want to enable Face Unlock for.

4

Select the face icon in the top toolbar.

5

Click Enable Face Unlock.

6

Choose the desired Face Unlock enrollment method.

Alternatively, to bulk upload Face Unlock photos:

1

In Verkada Command, go to All Products > Access and select Access Users and Groups.

2

Select Import > Upload Face Unlock Photos.

3

Drag and drop photos or upload them from your device.

The filename must match the user's email address, user ID, or external ID.

4

Click Upload to complete the process.

CSV import

Public API

---

FAQ

What is Face Unlock?

Face Unlock is an access method that allows users to walk up to the device and unlock a door with just their face - no badge or phone required.

How does Face Unlock work?

Face Unlock uses facial recognition technology to match a user captured by the Access Station Pro's camera to their corresponding enrolled face credential in the access control database. It pairs this with advanced anti-spoofing protection, using an infrared 3D sensor and AI liveness detection model to detect someone trying to use a photo or mask of an authorized user to gain access.

How do organizations enroll users in Face Unlock?

Organizations can enroll users in Face Unlock through either admin-run or self-enrollment methods.

• Admin-run enrollment: Admins can use existing photos stored in Command or upload photos from HR or third-party systems via the UI or API.

• Self-enrollment: Admins send an invite via email or SMS. Users then take a photo through a secure web link. Visitors can also opt in during the sign-in process with Verkada Guest.