FaceCloak protects your face from AI recognition with a single photo
New system creates personalized pixel-level masks that fool facial recognition models.
FaceCloak, developed by Zachary Yahn and seven collaborators, tackles the growing threat of facial image scraping and unauthorized recognition. The system requires only a single user photo to produce a personalized, identity-protective mask. Its three-stage learning pipeline first generates a small set of diverse synthetic images from that one input. Then it iteratively adds perturbations that shift the user's facial identity embedding away from its original point toward a distant “anchor” identity, effectively cloaking the face. Finally, it produces a pixel-wise mask that can be applied to any image of that user, preserving perceptual quality while breaking recognition.
In extensive tests across three popular face datasets and ten different recognition models, FaceCloak outperformed 29 existing privacy methods. The masks are light-weight and efficient—applied in a single forward pass—making them practical for real-time use on social media uploads or profile photos. The code is open-source, enabling developers to integrate the protection into apps or platforms. This approach shifts privacy from “opt-out after scraping” to proactive, one-shot cloaking, potentially thwarting mass facial recognition pipelines.
- Generates a personalized universal face mask from a single user image using a three-stage perturbation learning method.
- Outperforms 29 existing methods across 10 facial recognition models on three benchmark datasets.
- Produces lightweight, pixel-wise cloaking that maintains high perceptual quality and can be applied efficiently to any photo of the user.
Why It Matters
One-click privacy protection could thwart unauthorized facial recognition from social media photos.