Face ID & App Lock

Settings → Face ID & app lock, or the same row inside Settings → Security & recovery.

The screen holds three settings, in this order: Face ID / Touch ID, Session Duration, and Device Authentication.

How long before you are signed out for inactivity.

The options run from 1 Hour, the most protective, to No Limit, the most convenient. Which of them you may choose is set by your account; in an organisation, your administrator decides, and a shorter maximum may be enforced for everyone.

How the app confirms it is you when you come back. Two modes are offered.

Standard — Face ID or a fingerprint, with your device passcode as the fallback.

Strict biometric — biometrics only, no passcode fallback.

This is separate from session duration: it guards the app in your hand, while session duration governs when the session itself ends. Which modes you may choose is set by your account.

How often the check is repeated: immediately, after one minute, five, fifteen, an hour, or only when the app starts.

A short timeout is the right choice on a phone other people handle.