# Touch ID for sensitive actions on your Mac

> After you agree to certain sensitive actions, the Mac app also asks for Touch ID or your Mac login password.

canonical: https://agentsky.dev/help/mac-device-authentication
source: https://agentsky.dev/help/mac-device-authentication.md
updated: 2026-11-03

---

**After you agree to a sensitive action, the Mac app also asks you to prove you are at your Mac.**

These actions ask for it:

- Letting a cloud agent use this Mac's apps and files.
- Allowing a local command that controls this Mac.
- Importing stored secrets.
- Moving stored secrets to your workspace.

Touch ID is used when your Mac has it. Otherwise macOS asks for your Mac login password, which AgentSky never sees.

Where: Mac app. The macOS prompt appears right after you agree.

Good to know: if you cancel the prompt, or it fails or times out, the action stays refused. A rejected Touch ID prompt does not fall back to your password. Related: [Allow AgentSky the permissions it needs](https://agentsky.dev/help/mac-allow-agentsky-permissions), [Set up Mac permissions for computer use](https://agentsky.dev/help/computer-use-permissions), [Let an agent use Mail, Notes, Calendar, Reminders and Contacts on your Mac](https://agentsky.dev/help/mac-app-access).