Fix 1: Re-enroll fingerprints
System Settings → Touch ID & Password → delete all enrolled prints → enroll fresh.
Each fingerprint enrollment takes 30–60 seconds. Use varied angles — Touch ID learns from multiple positions.
Solves: skin changes (cuts, very dry skin, calluses), enrollment that was rushed/incomplete.
Fix 2: Clean the sensor
Touch ID sensor accumulates skin oil + dust. Wipe gently with slightly damp microfiber cloth.
Don't use isopropyl alcohol — the sapphire crystal surface is durable but the surrounding sealant isn't.
Dry thoroughly. Test enrollment again.
Fix 3: Reset SMC + NVRAM (Intel only)
Apple Silicon: just restart twice in a row.
Intel: power off → hold Shift+Control+Option + Power for 10 seconds → release → power on.
Sometimes Touch ID controller gets confused and SMC reset clears the state.
Fix 4: Make sure Apple ID is signed in
Touch ID requires Apple ID for Apple Pay, App Store, and unlock-via-Apple-Watch.
Settings → Apple ID → verify signed in. If signed out: sign back in and re-enroll Touch ID.
Fix 5: Software update check
Some macOS versions have Touch ID-related bugs fixed in subsequent updates.
System Settings → General → Software Update → install pending.
Fix 6: Try in Safe Mode (rule out third-party software)
Boot in Safe Mode (Apple Silicon: hold power → Continue in Safe Mode. Intel: hold Shift during boot).
Test Touch ID. If works in Safe Mode = third-party software interfering. Common culprit: security/privacy software, custom keyboard apps.
Fix 7: Test in fresh user account
System Settings → Users & Groups → add new user → log out → log into new user.
Enroll Touch ID fresh. If works in new user = user-account-specific config corruption. Migrate data to new user account or reset enrollment in old user.
When it's hardware
Symptom: Touch ID disabled + macOS shows 'Touch ID is currently disabled' even after restart. SMC reset doesn't help. New user enrollment fails immediately.
Cause: Touch ID sensor failed, or Secure Enclave (T2/M-chip) lost pairing with the sensor.
Common after: liquid damage, drop impact on the sensor area, third-party top-case replacement that didn't pair properly.
Fix: T2 firmware re-pairing (PKR 10k–15k) or top-case replacement (PKR 35k–80k) for physically damaged sensor.