Passcode

The Apple passcode policy defines security requirements for device passcodes on iOS devices. When a user registers a device with iOS, a system-level restriction applies: if a passcode policy is configured, iOS automatically enforces a complex passcode with at least six characters – regardless of other settings. As a result, certain configuration values may be ignored.

Still, the policy offers a wide range of options to further adapt passcode security. These include requirements for complexity, length, validity period, and the number of allowed failed attempts.

Configuration Options #

• Allow simple passcodes

• Require alphanumeric passcodes

• Minimum passcode length

• Required number of special characters

• Maximum passcode age (in days)

• Inactivity timeout (in minutes): Maximum selectable value for the end user

• Passcode history

• Maximum auto-lock time (in minutes)

  • Immediately
  • 1 minute
  • 5 minutes
  • 15 minutes
  • 60 minutes
  • 4 hours

• Maximum number of failed attempts

  If the limit is exceeded, a wipe action is triggered.

Shared iPad: Operating Modes and Passcode Behavior #

Apple offers two operating modes for the Shared iPad:

Using Managed Apple IDs In this mode, the device is configured with user accounts based on Managed Apple IDs. Passcodes are assigned and managed centrally through these accounts. As of now, users cannot individually adjust the auto-lock duration in this configuration.

Using Guest Mode In this mode, users log in as a Guest without a personal account or passcode. This option is particularly suitable for environments with frequently changing users and no need for personalized data.

Please note: For a flexible setup without passcodes, Guest Mode is usually the recommended option.