# Set up Touch ID for a Mac vault

> Enroll a password-based vault on this Mac and understand how that differs from unlocking the app.

Document ID: phantom-help:phantomvault/touch-id-mac
Product: PhantomVault
Platforms: macOS
Updated: 2026-11-02
Availability: Preview-build instructions.
Tested app version: Not recorded
Tested build: Not recorded
Tested OS version: Not recorded

Source: https://llms.phantomsecure.app/phantomvault/touch-id-mac.md
Human guide: https://phantomsecure.app/help/phantomvault/touch-id-mac/
Agent guide: https://llms.phantomsecure.app/phantomvault/touch-id-mac/
Documentation index: https://phantomsecure.app/llms.txt
Full handbook: https://phantomsecure.app/llms-full.txt

## Requirements

Touch ID for a vault is available for native passphrase vaults on a Mac with configured, available Touch ID. A security-key vault continues to require its registered security key.

The enrollment is local to this Mac and app. Keep the vault passphrase: Touch ID availability can change, and another Mac or app installation does not inherit this enrollment automatically.

## Enroll the vault

1. Save and close files in the vault, then choose **Lock & Eject**.
2. Open the vault's three-dot menu and choose **Touch ID Settings…**.
3. Under **Touch ID for This Vault**, choose **Set Up**. If already enrolled, choose **Replace**.
4. Enter the vault passphrase and choose **Unlock and Set Up**.
5. Complete the fresh Touch ID check.

Successful setup opens the vault and enrolls its unlock credential for the current fingerprints on this Mac. If the app says the vault opened but Touch ID was not enrolled, the open succeeded; lock it and retry setup if you still want Touch ID.

You can also enable **Use Touch ID next time** during a passphrase unlock. If enrollment already exists, the unlock screen offers **Replace the enrolled Touch ID identity** and **Forget Touch ID for this vault**.

## Use or remove enrollment

At the vault unlock screen, choose **Unlock with Touch ID** and follow the prompt. Additional custody still applies.

To remove the local enrollment, return to **Touch ID Settings…** and choose **Forget**. The vault's passphrase is unchanged.

## If the control is unavailable

Lock the vault before setup or replacement. Check Touch ID in macOS System Settings and unlock the Mac with its login password if biometric authentication is temporarily unavailable. Use the vault passphrase while resolving Touch ID availability.

## App Touch ID is separate

**Settings → App Access → Unlock App with Touch ID** unlocks the app interface. It does not enroll any vault. On iPhone and iPad, Face ID or Touch ID is used by **App Lock**; the current vault unlock interface still asks for the vault's password or security key.