Your membership has expired

The payment for your account couldn't be processed or you've canceled your account with us.

Re-activate

Save products you love, products you own and much more!

Save products icon

Other Membership Benefits:

Savings icon Exclusive Deals for Members Best time to buy icon Best Time to Buy Products Recall tracker icon Recall & Safety Alerts TV screen optimizer icon TV Screen Optimizer and more

    Got a Google Pixel 6a? Here's What to Do If the Wrong Fingerprint Can Unlock It.

    CR testers confirmed a bug in the smartphone and tested a fix

    hand with finger over fingerprint sensor on Google Pixel 6a smartphone Photo: Melanie Pinola/Consumer Reports

    In the past two months, dozens of people who purchased Google’s new Pixel 6a phone have reported on Reddit and YouTube that the fingerprint scanner can pose a security risk, unlocking the device with an unregistered fingerprint.

    A Reddit user who asked to be identified as Josh P. was among them. On July 29, the day after the Pixel 6a was released, Josh unboxed his new phone and added the fingerprints from both thumbs to the unlock settings. Later that day, he started seeing online complaints about the fingerprint scanner. 

    “So I tried using my index fingers,” Josh told Consumer Reports via Reddit. “And sure enough, both of them unlocked my phone.” His older brother was able to unlock the phone, too, using his own unregistered thumbs. Josh, who lives in New Hampshire and works in IT, decided the security risk wasn’t worth it, and he returned the phone.

    Now, testers in Consumer Reports’ labs have confirmed that the bug is still a problem in at least some phones bought at retail outlets. In the course of our standard evaluations, testers were able to unlock all three Google Pixel 6a phones we’d purchased using unregistered fingerprints.

    More on Cellphones

    Over more than two dozen attempts, we found that a user could sometimes unlock the Pixel 6a with a finger different from the one registered on the phone. This means you might unintentionally unlock the phone simply by holding it in your hands. 

    In one instance, we were even able to unlock the Pixel 6a with a finger from a completely different user. This is a bigger security problem. 

    “I would definitely be concerned if other people can unlock my phone,” says Rich Fisco, who oversees electronics testing at CR. That would give people access to not only emails and text messages, Fisco says, but also apps that use the phone’s fingerprint recognition system to let you purchase things, tap and pay at a register, and access your bank account.

    To be clear, this bug doesn’t seem to affect all Pixel 6a phones. We were unable to replicate it with a 6a model outside our test lab, and in online discussions, many Pixel 6a owners say they haven’t experienced the issue.

    Based on its overall performance, CR recommends the phone.

    We asked Google if it was aware of the problem and had taken any action to correct it. The company declined to answer those questions directly. However, a spokesperson sent this statement via email: “The under display fingerprint sensor in Pixel 6a was tested to meet the industry standard for security where the probability of an unverified fingerprint match is 1 in 50,000 attempts. We continually make improvements to our fingerprint performance, stability, and reliability and users should ensure they are running the latest version of Android 13.”

    Google’s software update notes for Android 13 point to a number of fixes and improvements to the fingerprint sensor, but don’t cite this issue. 

    In the meantime, there’s a fix, detailed below, that we tried on one of the three Pixel 6a phones in our lab. It resolved the issue on that phone, though we can’t guarantee it will work on every Pixel 6a phone.

    What to Do If You Own a Pixel 6a Phone

    First, test your phone to see if you can unlock it with either an unregistered finger on your hand, or the hand of a friend or relative. 

    (It’s worth trying this test with some earlier models, too. Last year, people on Reddit and YouTube reported seeing the same problem with their Pixel 6 and Pixel 6 Pro phones. CR did not observe the issue in our testing of those models.)

    If you find you have the issue, delete all fingerprints registered on the phone. This disables the unlock feature. Here’s how.

    1. Swipe down from the top of the screen and tap on the Settings gear icon.
    2. Tap Security > Fingerprint Unlock.
    3. Enter your PIN to continue.
    4. Click the trash can icon to delete each fingerprint registered on the phone.

    Next, re-register one fingerprint (repeating steps 1 through 3 and tapping “Add fingerprint”), and retest the phone. If it opens only for that finger, you can register additional prints.

    If the issue continues, delete the one fingerprint using the steps above to disable the unlock feature until Google offers a fix. Rely on your password, PIN, or pattern unlock instead.

    Deleting all fingerprints might require you to re-register fingerprints with any apps set up to use that security feature. To be extra-safe, though, you may want to shift to using a password for the apps until a Google fix arrives.


    Melanie Pinola

    Melanie Pinola

    Melanie Pinola covered smartphones, home office products, and a wide range of other technology topics for Consumer Reports. Her work appeared in the New York Times, Popular Mechanics, Laptop Magazine, PCWorld, and other publications.