# Secure Enclave Secure Enclave is Apple’s isolated security subsystem for protecting sensitive cryptographic operations and secrets independently from the main application processor’s ordinary software environment. ## Security role It supports functions such as device-key protection, passcode-related operations, biometric authorization, and secure-boot policy on supported hardware. ## Boundary Isolation reduces exposure but does not make every surrounding workflow trustworthy. Provisioning, user authorization, recovery policy, operating-system requests, hardware design, and implementation vulnerabilities remain part of the total system. ## Relationships [[Hardware Root of Trust]] · [[Signed System Volume]] · [[Apple Personalized Restore]] · [[Cryptographic Key Management]].