We recommend that, in addition to requiring a device password, you configure your devices to automatically prompt for a password after a period of inactivity.