[web007]

How do you validate the passcode if you're not storing it or a hashed version of it on the device?

[mem0r1]

For example if you encrypt your disk or a file using a password, you also do not store a hash, the decryption/encryption key is derived from your password using a key derivation function such as https://en.wikipedia.org/wiki/Scrypt

[mem0r1]

https://support.apple.com/guide/security/secure-enclave-over...