HomeView Adds Anti-Spoofing Lock After 3 Failed Face Scans

Apple’s HomeView smart home hub is still a week away from launch, but code found in the latest iOS beta suggests the company is already hardening the device against face-recognition spoofing and laying the groundwork for chatbot apps. The findings, uncovered by code investigator pdfu and reported by MacRumors on November 5, add two new details to a product Apple has so far described only in broad strokes.

HomeView, Apple’s first dedicated smart home hub, launches on November 13 for $299 in desktop and wall-mounted versions. It recognizes up to six people by face and switches to each person’s own Home Screen, complete with personal messages, calendar entries, photos, and smart home controls. That personal touch is exactly why the new security findings matter: a shared screen in a hallway or kitchen needs to know who is looking at it, and what to do when someone tries to fool it.

Chatbot Apps Inch Closer in iOS 27.3 Beta

According to the report, code in the iOS 27.3 beta shows that the software HomeView uses to display apps from a connected iPhone or iPad has gained a new Conversational Apps category. The update also reportedly adds preparations for two-way audio routing, session management, and interruptions, although pdfu notes the feature is still not fully wired up.

The discovery builds on an earlier hint. On Sunday, pdfu suggested that chatbot apps might come to HomeView based on an unused flag in the hub’s software. The new beta code gives that idea more weight, but it still falls short of confirmation. Apple has not announced chatbot apps for HomeView, and the code does not show which apps could use the new category or when support might arrive. Support for ChatGPT, Claude, or any other chatbot is therefore unconfirmed.

The distinction matters because HomeView will not have an App Store of its own. As MacRumors reported last month, the hub instead shows CarPlay-style third-party audio and video apps streamed from a connected iPhone or iPad. A conversational apps category would fit the same model: a chatbot running on the phone, surfaced on the hub’s 7-inch display, with voice routed through the device. Two-way audio routing and session management are precisely the plumbing such a setup would need.

For now, though, the only voice assistant Apple has confirmed for HomeView is Siri AI, whose conversations can continue in the Siri app on other Apple devices. Whether chatbot apps arrive as a later software update, and which services Apple would allow, remains an open question.

Anti-Spoofing Protection Already in HomeView Software 27.2

The second finding is more concrete. Pdfu also discovered that HomeView includes anti-spoofing protection, and unlike the chatbot category, this feature is already enabled in HomeView software 27.2, the version the hub is expected to ship with.

According to the report, after three spoof attempts against a profile, the user must authenticate with an iPhone to see personal data. In other words, if the hub’s camera is presented with something that is not the enrolled person’s live face three times, it stops trusting face recognition for that profile and demands a phone-based check before showing anything personal.

That design makes sense given what HomeView displays. When an enrolled user is recognized, and their iPhone or iPad is nearby and recently unlocked, the hub shows personal content from Messages, FaceTime, Calendar, Reminders, and Find My. A shared household device that hands out that information on the strength of a face match alone needs a fallback when the match looks suspicious, and a spoof attempt is the clearest signal that something is wrong.

Escalating Lockouts Are Still in Development

Apple is also said to be working on a lockout cooldown system, similar to what happens when the wrong passcode is entered repeatedly on an iPhone. A first lockout can be cleared immediately, but a second lockout brings a one-hour wait, a third a four-hour wait, and a fourth, or any further lockout, an eight-hour wait.

The cooldown periods are still in development, pdfu adds, so for now any lockout can be cleared immediately by authenticating with an iPhone. The escalating delays, if they ship, would make repeated spoofing attempts increasingly impractical: an attacker who fails three times, waits out a lockout, and tries again would face longer and longer waits.

Apple has not described either feature in its press materials, so the details come entirely from the code findings. That is worth keeping in mind: features found in beta code do not always reach the public release in the same form, and the lockout timings in particular are explicitly described as unfinished.

Why Face Security Matters on a Shared Hub

HomeView is designed to sit in shared spaces. It recognizes up to six household members, each with a personal Home Screen, and its Home Camera face can show up to nine live camera feeds. It also supports recognition of people, pets, packages, and vehicles from compatible cameras with a supported iCloud+ subscription, and it can detect smoke and carbon monoxide alarm sounds.

A hub that personal also has to be careful about who it is talking to. A phone locks itself in a pocket; a wall-mounted display in a hallway does not. Face recognition is the mechanism that lets HomeView feel personal while remaining shared, and anti-spoofing is what keeps that mechanism honest. A photo held up to the camera, or a more elaborate attempt to mimic an enrolled face, should not unlock someone’s messages and calendar.

The three-attempt threshold and the iPhone authentication fallback strike a balance between convenience and caution. Genuine recognition failures, from bad lighting or an odd angle, should rarely hit three spoof flags in a row, while a deliberate attempt would trip the limit quickly. And because the fallback is an iPhone the user already owns, a legitimate user who does get locked out is not stranded.

HomeView Launches November 13

HomeView arrives next week at $299, in a tabletop model with a speaker base and a wall-mounted model, with a 7-inch Liquid Retina display. Beyond face recognition and Siri AI, Apple has announced FaceTime with Center Stage, Messages by voice or keyboard, Intercom, multiroom audio with HomePod, HomePod mini, and AirPlay speakers, Handoff from iPhone, step-by-step recipes with hands-free timers, and smart home controls covering Apple Home Collection accessories, other Works with Apple Home accessories, and Matter devices.

One notable gap remains geography. HomeView is not on sale in the European Union because Siri AI is currently unavailable in iOS there, and Apple says it is still working with the EU to find a path forward.

For prospective buyers, the new findings add two things to watch when the hub ships: whether the conversational apps category turns into real chatbot support in a future update, and how the anti-spoofing protection behaves in everyday use. The first is still a possibility; the second, according to the code, is already in the box.