diff --git a/docs/cli/settings.md b/docs/cli/settings.md
index 10bfee644f..39b8178acc 100644
--- a/docs/cli/settings.md
+++ b/docs/cli/settings.md
@@ -145,7 +145,7 @@ they appear in the UI.
 | Tool Sandboxing                       | `security.toolSandboxing`                       | Tool-level sandboxing. Isolates individual tools instead of the entire CLI process.                                                                                                                                                  | `false` |
 | Disable YOLO Mode                     | `security.disableYoloMode`                      | Disable YOLO mode, even if enabled by a flag.                                                                                                                                                                                        | `false` |
 | Disable Always Allow                  | `security.disableAlwaysAllow`                   | Disable "Always allow" options in tool confirmation dialogs.                                                                                                                                                                         | `false` |
-| Allow Permanent Tool Approval         | `security.enablePermanentToolApproval`          | Enable the "Allow for all future sessions" option in tool confirmation dialogs.                                                                                                                                                      | `false` |
+| Allow Permanent Tool Approval         | `security.enablePermanentToolApproval`          | Enable the "Allow for all future sessions" option in tool confirmation dialogs.                                                                                                                                                      | `true`  |
 | Auto-add to Policy by Default         | `security.autoAddToPolicyByDefault`             | When enabled, the "Allow for all future sessions" option becomes the default choice for low-risk tools in trusted workspaces.                                                                                                        | `false` |
 | Blocks extensions from Git            | `security.blockGitExtensions`                   | Blocks installing and loading extensions from Git.                                                                                                                                                                                   | `false` |
 | Extension Source Regex Allowlist      | `security.allowedExtensions`                    | List of Regex patterns for allowed extensions. If nonempty, only extensions that match the patterns in this list are allowed. Overrides the blockGitExtensions setting.                                                              | `[]`    |
diff --git a/docs/reference/configuration.md b/docs/reference/configuration.md
index b2d8955d5f..0b4e728823 100644
--- a/docs/reference/configuration.md
+++ b/docs/reference/configuration.md
@@ -1593,7 +1593,7 @@ their corresponding top-level category object in your `settings.json` file.
 - **`security.enablePermanentToolApproval`** (boolean):
   - **Description:** Enable the "Allow for all future sessions" option in tool
     confirmation dialogs.
-  - **Default:** `false`
+  - **Default:** `true`
 
 - **`security.autoAddToPolicyByDefault`** (boolean):
   - **Description:** When enabled, the "Allow for all future sessions" option
diff --git a/packages/cli/src/config/settingsSchema.ts b/packages/cli/src/config/settingsSchema.ts
index 2b6c959397..5bc47b11b6 100644
--- a/packages/cli/src/config/settingsSchema.ts
+++ b/packages/cli/src/config/settingsSchema.ts
@@ -1840,7 +1840,7 @@ const SETTINGS_SCHEMA = {
         label: 'Allow Permanent Tool Approval',
         category: 'Security',
         requiresRestart: false,
-        default: false,
+        default: true,
         description:
           'Enable the "Allow for all future sessions" option in tool confirmation dialogs.',
         showInDialog: true,