The names FaceID and TouchID are apt. They are IDs. Not passwords. You should unlock your phone by something in your memory. Unlock by face or fingerprint is an anti-feature for me.