Audit App Store Password Settings

LowLevel 2Manual reviewmacos

Description

With Mac OS X 10.11, Apple added settings for password storage for the App Store in macOS. These settings parallel the settings in iOS. As with iOS, the choices are a requirement to provide a password after every purchase or to have a 15-minute grace period, and whether or not to require a password for free purchases. The response to this setting is stored in a cookie and processed by iCloud.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

GUI: System Settings > Apple Account > Media & Purchases > Verify that Free Downloads is set to your organization's requirements > Verify that Purchases and In-App Purchases is set to your organization's requirements.

How it is fixed

Fix method: Guidance or infrastructure patch

GUI: System Settings > Apple Account > Media & Purchases > Set Free Downloads to your organization's requirements > Set Purchases and In-App Purchases to your organization's requirements.

Properties

Operating systems: macos-26
Tags: macossystem-settings
Reference: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.1.2 Audit App Store Password Settings