How to Unlock Your Mac With Your Apple Watch

[MacRumors]

Starting with macOS Sierra, Apple introduced an "Auto Unlock" feature that makes it easier for Apple Watch owners to unlock their Macs, with the Apple Watch being used for authentication purposes instead of a traditional password.

It's a feature that's limited to more recent Macs so it's not going to work on some older machines, but when it is available, Auto Unlock is a super useful option that genuinely saves a bit of time. It isn't always enabled by default, so there are a few steps to go through to turn Auto Unlock on. Here's how to use it.

1. Navigate to the Apple logo on the upper left hand of the screen and select "System Preferences."
2. Click on "Security & Privacy" from the first row of apps.
3. Auto Unlock is an option under the "General" section. Click the check box to turn it on.
   
   
   
4. Enter your password.
   
   
   

Once enabled, Auto Unlock works automatically whenever your authenticated Apple Watch is near your Mac (as in within a few feet). When waking a Mac from sleep and the password entry screen pops up, it will say "Unlocking with Apple Watch..." instead of bringing up the password text box.

A few seconds later, the Mac will unlock and you will receive a notification on your Apple Watch letting you know the unlocking was successful. If Auto Unlock fails to authenticate for some reason, the password entry option will pop up after approximately 10 seconds and you will be required to enter your password to log in.

Auto Unlock is a Continuity feature, so it is limited to some of Apple's more recent machines. It is supported by all Mac models introduced in mid-2013 or later, and it requires an Apple Watch running watchOS 3 or later paired with an iPhone 5 or later. Handoff must be turned on in System Preferences (General --> Allow Handoff) and your iPhone, Apple Watch, and Mac must be signed into the same iCloud account.

To enable Auto Unlock, you will also need to turn on Two-Factor Authentication if it isn't on already.

For those of you using the original Two-Step Verification instead of the Two-Factor Authentication feature introduced with iOS 10, you will need to disable Two-Step Verification on the Apple ID management site and then enable Two-Factor Authentication on an iOS device. A passcode also needs to be established on the Apple Watch.

Apple doesn't offer troubleshooting tips if Auto Unlock isn't working, but signing out of iCloud and back in again and restarting your devices may help solve any issues.

There are still instances where you will need to log in with a password, like after rebooting your machine, but for the most part, Auto Unlock successfully replaces password entry on the Mac.

Article Link: How to Unlock Your Mac With Your Apple Watch

 

[macpeach55]

Why is this limited to only the watch? Real Question - is this a technical issue?

 

[DMVillain]

I have Continuity and Handoff on my Late-2012 rMBP, so I'm anxious to see if this works for me.

 

[Quu]

That two-step to two-factor thing got me cause when I logged in online there was no option on the web page to activate two-factor after disabling two-step. I had to go into the iCloud settings pane on my Mac instead to setup two-factor (which was pain free, just confusing that it's not on the webpage online or instructions etc).

The unlocking thing works great, very fast

 

[bdebevc]

Anyone have luck turning off the notification on the watch once you unlock your Mac?

 

[itsmilo]

Never understood the whole two step thing. I am using whatever sends a code via text or to my device

 

[testcard]

...and of course you need Bluetooth turned on.

 

[shareef777]

I have Continuity and Handoff on my Late-2012 rMBP, so I'm anxious to see if this works for me.

Same here. I can't think of any technical reason that this wouldn't work. I'd be shocked if it doesn't work on a 2012 rMBP. Oh wait, this is Apple. Wouldn't shock me in the slightest.

 

[applepai123]

Can it also lock the mac?

 

[DMVillain]

Same here. I can't think of any technical reason that this wouldn't work. I'd be shocked if it doesn't work on a 2012 rMBP. Oh wait, this is Apple. Wouldn't shock me in the slightest.

Can confirm that the Late-2012 rMBP doesn't have it. I didn't want a new Mac until now.

 

[pat500000]

Same here. I can't think of any technical reason that this wouldn't work. I'd be shocked if it doesn't work on a 2012 rMBP. Oh wait, this is Apple. Wouldn't shock me in the slightest.

Probably limiting it so you buy a new computer.

 

[3square]

Why is this limited to only the watch? Real Question - is this a technical issue?

i think it has to do with which device has the most recent/constant authentication. For the iPhone, only once you unlock with touchID, only then it is considered authenticated. Since anyone can take your phone and place it near your mac to unlock it.

With the watch, from the moment you put it on AND authenticate it with your iPhone touchID, the watch will always be considered authenticated. Until you remove the watch.

Can anyone please verify my theory? remove the watch off your wrist and try to unlock your Mac.

i'm sure apple can set it up to work with your phone. but that would require you to use touchID on your phone every time. Apple being apple, I assume would rather take the most seamless path. I honestly wouldn't mind using the phone as a second method. Maybe with the next update?

 

[WiseAJ]

Probably limiting it so you buy a new computer.

Now they just need to release said new computers.

 

[Jeremy1026]

Why is this limited to only the watch? Real Question - is this a technical issue?

Ease of authentication. You're watch stays authenticated as long as it doesn't leave your wrist after being unlocked. So you can realistically assume that at any point it will be able to authenticate to you. Unlike with your phone which might be unlocked, on your desk, or maybe locked in your pocket.

Unlock via phone could work, but you lose a lot of the seamlessness of it, so I'm betting that is why Apple chose to not include it as an option.
[doublepost=1474403155][/doublepost]

Can it also lock the mac?

No, thats still on you. It'd have to be pinging and analyzing response times constantly, which wouldn't be very nice for the watch or (portable) mac's battery.

 

[myname70]

Good option and good intention. But still is very bugos - it works 1 time out of 7-8. Very unreliable. I tested it for couple of weeks but no improvement at all.

 

[MacBird]

Can confirm that the Late-2012 rMBP doesn't have it. I didn't want a new Mac until now.

Doesn't work on a mid-2012 MBA, either.

 

[konqerror]

Same here. I can't think of any technical reason that this wouldn't work. I'd be shocked if it doesn't work on a 2012 rMBP. Oh wait, this is Apple. Wouldn't shock me in the slightest.

Because it uses time-of-flight WiFi, it requires a Mac with a 802.11ac card.

 

[macpeach55]

i think it has to do with which device has the most recent/constant authentication. For the iPhone, only once you unlock with touchID, only then it is considered authenticated. Since anyone can take your phone and place it near your mac to unlock it.

With the watch, from the moment you put it on AND authenticate it with your iPhone touchID, the watch will always be considered authenticated. Until you remove the watch.

Can anyone please verify my theory? remove the watch off your wrist and try to unlock your Mac.

i'm sure apple can set it up to work with your phone. but that would require you to use touchID on your phone every time. Apple being apple, I assume would rather take the most seamless path. I honestly wouldn't mind using the phone as a second method. Maybe with the next update?

Ease of authentication. You're watch stays authenticated as long as it doesn't leave your wrist after being unlocked. So you can realistically assume that at any point it will be able to authenticate to you. Unlike with your phone which might be unlocked, on your desk, or maybe locked in your pocket.

Unlock via phone could work, but you lose a lot of the seamlessness of it, so I'm betting that is why Apple chose to not include it as an option.
[doublepost=1474403155][/doublepost]

No, thats still on you. It'd have to be pinging and analyzing response times constantly, which wouldn't be very nice for the watch or (portable) mac's battery.

Thank you Both. That makes total sense

 

[2457282]

No no, step 1a is to verify that your mac is 2013 or later. Step 1b is to buy a new mac if yours is not 2013 or later.[/QUOTE][/QUOTE]

 

[redheeler]

I honestly wouldn't mind using the phone as a second method. Maybe with the next update?

Like I've said before, won't happen. Apple has plenty of Watches to sell. If the iPhone could be used instead, even slightly less intuitively, there goes a major selling point.

 

[shareef777]

Because it uses time-of-flight WiFi, it requires a Mac with a 802.11ac card.

Works fine with MacID (a 3rd party solution). Any other excuses Apple can come up with?

 

[Jeremy1026]

Good option and good intention. But still is very bugos - it works 1 time out of 7-8. Very unreliable. I tested it for couple of weeks but no improvement at all.

Mine works about 95% of the time. The few times it doesn't, I shut the lid and reopen it and it does work.

 

[Peepo]

Mine has been working 100% of the time since I installed GM last week - I'm impressed. 2013 rmbpro

 

[konqerror]

Works fine with MacID (a 3rd party solution). Any other excuses Apple can come up with?

Explain how MacID is resistant to relay and amplifier attacks, especially at short distances.

How does MacID prevent this from happening?
https://www.wired.com/2016/03/study-finds-24-car-models-open-unlocking-ignition-hack/

Perhaps you should learn a little more about computer security before criticizing.

 

[nagromme]

Wondering how it works with multiple users. Can I assume that multiple users with Apple Watches in the same household would each auto-unlock their own separate Mac user account? That would be neat—avoid even having to specify who you are, maybe? It unlocks to whoever is physically closest?