If you have already enabled two-step authentication via SMS, a mobile app, or a hardware security key, you have the additional option of adding one or more Touch ID-capable devices, such as a 2017 or newer MacBook Pro and a 2018 or newer MacBook Air. When signing in from these devices, you can use Touch ID instead of SMS, an authenticator app, or a hardware security key to complete two-step authentication.

You will not be able to use Touch ID when signing in from a device that was not added to your account. In these cases, you will need to use SMS, your authenticator app, or a hardware security key to sign in.

Set up two-step authentication with a Touch ID-capable device

1. If you have not yet done so, first set up two-step authentication by SMS, an authenticator app, or a hardware security key.
2. In macOS settings, go to Touch ID and add a fingerprint if you haven’t done so already. For details, see Apple’s documentation.
3. In your Profile settings under the Two-step authentication section, click Add authentication method.
4. Select Use Touch ID. This option will only appear if your browser supports Touch ID.
5. When prompted by macOS, touch the fingerprint sensor on the power button.
   

6. Next, enter a name for your Touch ID device. This will help you tell them apart if you add multiple Touch ID-capable devices.

The next time you sign in, you will be prompted to use Touch ID for two-step authentication. If you have a hardware security key, you can still use it while being prompted for Touch ID. You can also cancel and opt to use a verification code instead, either through SMS or a mobile app.

Additional Information

Touch ID is supported through WebAuthn, which requires a modern browser.