Ensure 'Require Touch ID / Face ID authentication before AutoFill' is set to 'Enabled'


This recommendation pertains to forcing re-authentication at each AutoFill operation.

A device may be accessed by an unauthorized user while unlocked. This recommendation provides defense-in-depth by forcing re-authentication before credentials will be populated by AutoFill.


1. Open Apple Configurator.
2. Open the Configuration Profile.
3. In the left windowpane, click on the Restrictions tab.
4. In the right windowpane, verify that under the tab Functionality, the checkbox for Require Touch ID / Face ID authentication before AutoFill is checked.
5. Deploy the Configuration Profile.

See Also