Requirements
Touch ID for a vault is available for native passphrase vaults on a Mac with configured, available Touch ID. A security-key vault continues to require its registered security key.
The enrollment is local to this Mac and app. Keep the vault passphrase: Touch ID availability can change, and another Mac or app installation does not inherit this enrollment automatically.
Enroll the vault
- Save and close files in the vault, then choose Lock & Eject.
- Open the vault's three-dot menu and choose Touch ID Settings….
- Under Touch ID for This Vault, choose Set Up. If already enrolled, choose Replace.
- Enter the vault passphrase and choose Unlock and Set Up.
- Complete the fresh Touch ID check.
Successful setup opens the vault and enrolls its unlock credential for the current fingerprints on this Mac. If the app says the vault opened but Touch ID was not enrolled, the open succeeded; lock it and retry setup if you still want Touch ID.
You can also enable Use Touch ID next time during a passphrase unlock. If enrollment already exists, the unlock screen offers Replace the enrolled Touch ID identity and Forget Touch ID for this vault.
Use or remove enrollment
At the vault unlock screen, choose Unlock with Touch ID and follow the prompt. Additional custody still applies.
To remove the local enrollment, return to Touch ID Settings… and choose Forget. The vault's passphrase is unchanged.
If the control is unavailable
Lock the vault before setup or replacement. Check Touch ID in macOS System Settings and unlock the Mac with its login password if biometric authentication is temporarily unavailable. Use the vault passphrase while resolving Touch ID availability.
App Touch ID is separate
Settings → App Access → Unlock App with Touch ID unlocks the app interface. It does not enroll any vault. On iPhone and iPad, Face ID or Touch ID is used by App Lock; the current vault unlock interface still asks for the vault's password or security key.