In using the passkey for amazon on iPad the third step that is verification with device passcode does not take place. I am signed in with autofill of a/c name and passkey. This seems very insecure. How can I fix this. iOS is up to date.
iPad mini 6, iPadOS 18
I'm not sure that I fully understand your concern. Passkey authentication work very differently to username/password authentication.
Passkeys use a cryptographic authentication using PKI (Public and Private keys) to authenticate the User. Your Passkeys are securely stored within your iPad's Secure Enclave, access to the keys requiring the user to first successfully authenticate to the device.
Use passkeys to sign in to websites and apps on iPad - Apple Support
Completely aware that the two work differently. That is not the problem- as Apple states after allowing a passkey to be used the system should then request your device passcode. On the iPad this does not happen. These two steps are described in Apple’s online guide.
Here is the guide from Apple Support com. Step 3 (ie request for passcode on device) does not occur.
Thanks for the clarification.
The differences between devices seems odd.
Are you positive that the iPad isn’t “grabbing your face” for a re-authentication.
Also … are you running iPadOS 18.3 ?
“… If you didn’t set up Face ID or Touch ID …”
Presumably then, you have the biometric authentication on your device active (???)…
… i.e. you are already authenticated.
Or it’s possibly re-authenticating you (via FaceID) “right then.”
Remember, iPad and iPhones are fundamentally single-user devices; and their software procedures are designed accordingly.
If you have enabled biometric authentication (i.e. FaceID or TouchID), you will not be prompted to enter your Passcode except in specific circumstances:
A passcode or password is also required if the device is in any of the following states:
• The device has just been turned on or restarted
• The user has logged out of their Mac account (or hasn’t yet logged in).
• The user hasn’t unlocked their device for more than 48 hours.
• The user hasn’t used their passcode or password to unlock their device for 156 hours (six and a half days), and the user hasn’t used a biometric to unlock their device in
4 hours.
• The device has received a remote lock command
• The user exited power off / Emergency SOS by pressing and holding either volume button and the Sleep/Wake button simultaneously for 2 seconds and then pressing Cancel.
• There were five unsuccessful biometric match attempts (though for usability, the device might offer entering a passcode or password instead of using biometrics after a smaller number of failures).
When Face ID with a mask is enabled on an iPhone, it’s available for the next 6.5 hours after one of the following user actions:
• Successful Face ID match attempt (with or without a mask)
• Device passcode validation
• Device unlock with Apple Watch
Any of these actions extends the period by an additional 6.5 hours when performed.
No. The iPhone always requires authentication after passkey entry, despite already having been authenticated on initial use of the phone. The iPad does not require this same ‘reauthentication’ after entry of a pass key.
To which "online guide" do you refer? A URL will help with context.
I don't have facial authentication set up - a passcode only.
Yes running 18.3
Interesting. TY
No verification of passkey with device passcode requested on iPad. Seems very insecure.
