If you have already enabled two-step authentication via SMS, a mobile app or a hardware security key, you have the additional option of adding one or more Touch ID-capable devices, such as a MacBook Pro from 2017 or later, or a MacBook Air from 2018 or later. When signing in from these devices, you can use Touch ID instead of an SMS, authenticator app or hardware security key to complete two-step authentication.

You will not be able to use Touch ID when signing in from a device that was not added to your account. In these cases, you will need to use SMS, your authenticator app or a hardware security key to sign in.

Set up two-step authentication with a Touch ID-capable device

1. If you have not yet done so, start by setting up two-step authentication using SMS, an authenticator app or a hardware security key.
2. In macOS settings, go to Touch ID and add a fingerprint if you haven't done so already. For details, see Apple's documentation.
3. In your Profile settings, under the Two-step authentication section, click Add authentication method.
4. Select Use Touch ID. This option will only appear if your browser supports Touch ID.
5. When prompted by macOS, touch the fingerprint sensor on the power button.
   

6. Next, enter a name for your Touch ID device. This will help you to tell them apart if you add multiple Touch ID-capable devices.

The next time you sign in, you will be prompted to use Touch ID for two-step authentication. If you have a hardware security key, you can still use it while being prompted for Touch ID. You can also cancel and opt to use a verification code instead, either through SMS or a mobile app.

Additional information

Touch ID is supported through WebAuthn, which requires a modern browser.