Create a Password and Screen Unlock configuration in Apple Business

You can use the Password and Screen Unlock configuration to set specific passcode and password requirements for user’s devices. For example, you can require a more secure alphanumeric password for iPhone, iPad, and Apple Vision Pro devices instead of a six-digit passcode.

In Apple Business, sign in with a user whose role has permissions to create, edit, and delete device configurations.
To view roles and permissions, see Intro to roles and permissions.
In your browser, choose Devices > Configurations > All Configurations.
Select All Configurations, select Add next to Password and Screen Unlock , then enter a name for the configuration.
Choose the platforms to create the configuration for, such as:
- iOS/iPadOS
- macOS
- visionOS

Choose whether you want password and passcode options. If you want options, then select Yes or No for each requirement listed here.

Configuration	Supported operating systems	Description
Allow simple passcodes or passwords	iOS iPadOS macOS visionOS	Permits users to use sequential or repeated characters in their passcodes or passwords—for example, “3333” or “DEFG.”
Require alphanumeric passcodes or passwords	iOS iPadOS macOS visionOS	Requires that the passcode or password contain at least one letter and one number.
Minimum length	iOS iPadOS macOS visionOS	Specifies the minimum number of characters a passcode or password can contain.
Minimum special characters	iOS iPadOS macOS visionOS	Specifies the minimum number of complex characters in the password. A complex character is a character other than a number or a letter, such as &, %, $, and #. Default: 0 Minimum: 0 Maximum: 4
Passcode or password history	iOS iPadOS macOS visionOS	A device refuses a new passcode or password if it matches a previously used passcode or password. You can specify how many previous passcodes or passwords are remembered and compared. It can be set to “none,” or from 1 to 50 passcodes or passwords.
Passcode or password history length	iOS iPadOS macOS visionOS	Specifies that the new passcode or password be different from the last number of passcodes or passwords, which you set in “Password and passcode history.”
Maximum passcode or password age	iOS iPadOS macOS visionOS	Requires users to change their passcode or password at the interval you specify. The interval can be set to Unlimited or to 1, 3, 6, or 12 months.
Auto-lock delay	iOS iPadOS macOS visionOS	Specifies the amount of time before an unused device automatically locks. It can be set to “none,” or set to lock after 1 to 5, 10, 15 minutes or never.
Authentication grace period	iOS iPadOS macOS visionOS	Specifies how soon a device can be unlocked again after use, without prompting again for the passcode or password. iPhone and iPad devices can be adjusted for a more frequent rate. The options are immediately, 1, 5, 10, 15 minutes, or 1, 4, or 8 hours.
Erase after failed unlock attempts	iOS iPadOS visionOS	Forces a device to be erased after a specified number of incorrect attempts.
Force a password change the next time any user on a Mac authenticates	macOS	Forces users to enter a new password the next time they authenticate.
Allow Face ID or Touch ID to unlock	iOS iPadOS macOS (Touch ID)	Prevents users from using Face ID or Touch ID to unlock their devices.
Allow Face ID or Touch ID modification	iOS iPadOS macOS (Touch ID)	Prevents users from adding or removing existing biometric information.
Auto-unlock with Apple Watch	macOS	Prevents users from using their Apple Watch to unlock their Mac.
Unlock with a smart card	macOS	Allows a smart card to unlock a Mac.
Verify certificate trust	macOS	Specifies whether a smart card certificate has been verified, issued by a trusted Certificate Authority (CA), is valid within the date range specified, and hasn’t been revoked.
Trust certificates by default	macOS	Specifies whether smart card certificates are trusted by default.
Allow smart card pairing	macOS	Specifies whether users can pair smart cards. Existing smart cards aren’t affected.
Limit smart card pairing	macOS	Specifies whether users are allowed to pair more than one smart card to their Mac account. Existing multiple pairings aren’t affected.

Select Save.

Helpful?

Apple Business User Guide

Create a Password and Screen Unlock configuration in Apple Business