Password auto fill requires Touch ID every time?

unobtainium

macrumors 68020
Original poster
Mar 27, 2011
2,359
3,301
In iOS 11 I could autofill passwords and logins without verification. Now I have to select the right login information, then use Touch ID, then click again to sign in. Is it supposed to be like this? Why haven’t I read about this change anywhere?
 

MEJHarrison

macrumors 65816
Feb 2, 2009
1,437
1,522
It's a security measure. Your username and password should only auto fill by request of the user. I don't know the specifics, but the previous method left you vulnerable to web sites being able to grab that information.
 

vertical smile

macrumors 601
Sep 23, 2014
4,624
5,718
I don't know the specifics, but the previous method left you vulnerable to web sites being able to grab that information.
But, it shouldn't of auto-filled unless the website had a valid certificate, correct? Not sure of the harm of auto-filling a username and PW if it is a verified website.
 

MEJHarrison

macrumors 65816
Feb 2, 2009
1,437
1,522
But, it shouldn't of auto-filled unless the website had a valid certificate, correct? Not sure of the harm of auto-filling a username and PW if it is a verified website.
I could easily get a valid certificate and use it to build a site to do whatever I choose. Having a valid certificate isn't an indicator that the website is harmless. It just helps you know that you're talking to the people you think you are.
 

vertical smile

macrumors 601
Sep 23, 2014
4,624
5,718
It just helps you know that you're talking to the people you think you are.
This is what I was referring to. If you are talking to the people that you think you are, and you are okay with auto filling a password with those people's website, what is the harm in doing just that?
 

rorschach

macrumors 68020
Jul 27, 2003
2,074
655
This is what I was referring to. If you are talking to the people that you think you are, and you are okay with auto filling a password with those people's website, what is the harm in doing just that?
Settings > Touch ID & Passcode > Toggle “Passwords Auto-Fill” off. This brings back the old behavior.
 
  • Like
Reactions: vertical smile
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.