In iOS 11 I could autofill passwords and logins without verification. Now I have to select the right login information, then use Touch ID, then click again to sign in. Is it supposed to be like this? Why haven’t I read about this change anywhere?
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Password auto fill requires Touch ID every time?
- Thread starter unobtainium
- Start date
- Sort by reaction score
It's a security measure. Your username and password should only auto fill by request of the user. I don't know the specifics, but the previous method left you vulnerable to web sites being able to grab that information.
But, it shouldn't of auto-filled unless the website had a valid certificate, correct? Not sure of the harm of auto-filling a username and PW if it is a verified website.
I could easily get a valid certificate and use it to build a site to do whatever I choose. Having a valid certificate isn't an indicator that the website is harmless. It just helps you know that you're talking to the people you think you are.
This is what I was referring to. If you are talking to the people that you think you are, and you are okay with auto filling a password with those people's website, what is the harm in doing just that?
Settings > Touch ID & Passcode > Toggle “Passwords Auto-Fill” off. This brings back the old behavior.
