Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

An Activesync IT administrator has the ability to choose if the phone should require a password, and also how complex it should be.

Since the fingerprint scanner appears to replace the traditional password screen, how does that affect an Exchange-connected phone with traditional password policies?

share|improve this question

The Exchange ActiveSync Policy Engine gives administrators the option to allow biometrics. See for details.

In addition, it seems almost certain that using a PIN code or passphrase instead of biometrics will remain an option. It turns out that you must set at least a PIN when using TouchID. When you reboot, or have not unlocked the phone for 48 hours, the phone requires the PIN to unlock. See

share|improve this answer
Also Ben Thompson makes the interesting point that if Apple allow you to have both PIN and TouchID enabled at the same time, you get 2-factor. See – Graham Hill Sep 11 '13 at 12:00

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.