chore(runway): cherry-pick fix: Prompt for biometric access on iOS during wallet creation -

[runway-github]

• fix: Prompt for biometric access on iOS during wallet creation - cp-7.65.0 (fix: Prompt for biometric access on iOS during wallet creation - cp-7.65.0 #26002)

Description

This PR addresses a regression on 7.65.0 where biometrics access is no
longer prompted on wallet creation for iOS. The change here adds that
back, which should result in a more intuitive user experience + makes it
consistent with Android. This is an improvement relative to the code
that was removed in
#24496 since we're now
detecting the auth type prior to the password being stored rather than
triggering two storage actions.

Changelog

CHANGELOG entry:

Related issues

Fixes: #25998

Manual testing steps

Allowing biometrics

• Will be prompted ask for biometric access on wallet creation
• If allowed, unlock access control will be stored using biometrics
• Future unlock triggers biometrics

Rejecting biometrics

• Will be prompted ask for biometric access on wallet creation
• If rejected, unlock access control will not be stored, forcing user to
  use password
• Future unlock falls back to password entry

Screenshots/Recordings

Before

After

Allowing biometrics

ScreenRecording_02-12-2026.11-29-41_1.MP4

Rejecting biometrics

ScreenRecording_02-12-2026.11-45-59_1.MP4

Pre-merge author checklist

• I've followed MetaMask Contributor
  Docs and MetaMask Mobile
  Coding
  Standards.
• I've completed the PR template to the best of my ability
• I've included tests if applicable
• I've documented my code using JSDoc format
  if applicable
• I've applied the right labels on the PR (see labeling
  guidelines).
  Not required for external contributors.

Pre-merge reviewer checklist

• I've manually tested the PR (e.g. pull and build branch, run the
  app, test code being changed).
• I confirm that this PR addresses all acceptance criteria described
  in the ticket it closes and includes the necessary testing evidence such
  as recordings and or screenshots.

---

Note

Medium Risk
Touches core wallet creation/import and credential storage logic, including new native biometric prompting on iOS and changes to fallback behavior; regressions could affect onboarding success or how passwords are stored/retrieved.

Overview
Restores an explicit iOS biometric access-control prompt during wallet creation/import by adding Authentication.requestBiometricsAccessControlForIOS (backed by expo-local-authentication) and using its result to downgrade from BIOMETRIC to PASSWORD when the user declines/cancels.

Refactors auth persistence by removing updateAuthTypeStorageFlags/storePasswordWithFallback, making Authentication.storePassword public and adding an optional fallbackToPassword retry path; wallet creation/import and reset-password flows now call storePassword(..., true) directly.

Updates and expands unit tests to cover the new iOS prompt behavior and the revised storePassword fallback/flag logic, adds a Jest mock for expo-local-authentication, and introduces the expo-local-authentication dependency (iOS pod + package).

^{Written by Cursor Bugbot for commit 0f8b7e7. This will update automatically on new commits. Configure here.}

ff37603

[github-actions]

CLA Signature Action: All authors have signed the CLA. You may need to manually re-run the blocking PR check if it doesn't pass in a few minutes.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​expo-local-authentication@​15.0.2

View full report

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

[ieow]

lgtm

[github-actions]

🔍 Smart E2E Test Selection

⏭️ Smart E2E selection skipped - base branch is not main (base: release/7.65.0)

All E2E tests pre-selected.

View GitHub Actions results

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
96.4% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[metamaskbot]

No release label on PR. Adding release label release-7.65.0 on PR, as PR was cherry-picked in branch 7.65.0.