Configure a Password and Screen Lock setting in Apple Business Essentials
You can use the Password and Screen Lock settings to set specific passcode and password settings for user’s devices. For example, you can require a more secure alphanumeric password for iOS and iPadOS devices instead of a six-digit passcode.
In Apple Business Essentials, sign in with a user that has the role of Administrator.
Select Settings
in the sidebar, then select All Settings.Select the Add button
next to Password and Screen Lock 
.Under Platform, select the operating systems you would like to configure this setting for.
Choose whether you want password and passcode options. If you want options, then select Yes or No for each requirement listed here.
Setting
Supported operating systems
Description
Allow simple passcodes or passwords
iOS
iPadOS
macOS
Permits users to use sequential or repeated characters in their passcodes or passwords—for example, “3333” or “DEFG.”
Require alphanumeric passcodes or passwords
iOS
iPadOS
macOS
Requires that the passcode or password contain at least one letter and one number.
Minimum length
iOS
iPadOS
macOS
Specifies the minimum number of characters a passcode or password can contain.
Minimum special characters
iOS
iPadOS
macOS
Specifies the number of characters (such as $ and !) that the passcode or password must contain.
Passcode or password history
iOS
iPadOS
macOS
A device refuses a new passcode or password if it matches a previously used passcode or password. You can specify how many previous passcodes or passwords are remembered and compared. It can be set to “none,” or from 1 to 50 passcodes or passwords.
Passcode or password history length
iOS
iPadOS
macOS
Specifies that the new passcode or password be different from the last number of passcodes or passwords, which you set in “Password and passcode history.”
Maximum passcode or password age
iOS
iPadOS
macOS
Requires users to change their passcode or password at the interval you specify. The interval can be set to Unlimited or to 1, 3, 6, or 12 months.
Auto-lock delay
iOS
iPadOS
macOS
Specifies the amount of time before an unused device automatically locks. It can be set to “none,” or set to lock after 1 to 5, 10, 15 minutes or never.
Authentication grace period
iOS
iPadOS
macOS
Specifies how soon a device can be unlocked again after use, without prompting again for the passcode or password. iOS and iPadOS devices can be adjusted for a more frequent rate. The options are immediately, 1, 5, 10, 15 minutes, or 1, 4, or 8 hours.
Erase after failed unlock attempts
iOS
iPadOS
Forces a device to be erased after a specified number of incorrect attempts.
Force a password change the next time any user on a Mac authenticates
macOS
Forces users to enter a new password the next time they authenticate.
Allow Face ID or Touch ID to unlock
iOS
iPadOS
macOS (Touch ID)
Prevents users from using Face ID or Touch ID to unlock their devices.
Allow Face ID or Touch ID modification
iOS
iPadOS
macOS (Touch ID)
Prevents users from adding or removing existing biometric information.
Auto-unlock with Apple Watch
macOS
Prevents users from using their Apple Watch to unlock their Mac.
Unlock with a smart card
macOS
Allows a smart card to unlock a Mac.
Verify certificate trust
macOS
Specifies whether a smart card certificate has been verified, issued by a trusted Certificate Authority (CA), is valid within the date range specified, and hasn’t been revoked.
Trust certificates by default
macOS
Specifies whether smart card certificates are trusted by default.
Allow smart card pairing
macOS
Specifies whether users can pair smart cards. Existing smart cards aren’t affected.
Limit smart card pairing
macOS
Specifies whether users are allowed to pair more than one smart card to their Mac account. Existing multiple pairings aren’t affected.
Select Save.