2-factor authentication for Apple tree ID

Two-cistron hallmark is an extra layer of security for your Apple ID designed to ensure that you're the only person who can access your account, fifty-fifty if someone knows your countersign.

How it works

With two-cistron hallmark, only you can access your account on a trusted device or the web. When you want to sign in to a new device for the get-go time, you'll demand to provide two pieces of information—your password and the vi-digit verification code that's automatically displayed on your trusted devices or sent to your phone number. Past inbound the code, you're verifying that you trust the new device. For instance, if you take an iPhone and are signing into your account for the starting time time on a newly purchased Mac, you'll be prompted to enter your password and the verification code that's automatically displayed on your iPhone.

Because your password lone is no longer enough to access your account, 2-cistron authentication dramatically improves the security of your Apple ID and all the personal data you store with Apple.

In one case signed in, you won't be asked for a verification code on that device once more unless you sign out completely, erase the device, or need to modify your countersign for security reasons. When yous sign in on the spider web, yous tin can cull to trust your browser, so you lot won't be asked for a verification lawmaking the side by side time you sign in from that computer.

Trusted devices

A trusted device is an iPhone, iPad, or iPod touch with iOS nine or later, or Mac with Bone X El Capitan or later that you've already signed in to using two-gene authentication. It'south a device we know is yours and that tin can be used to verify your identity by displaying a verification code from Apple when you sign in on a different device or browser. An Apple tree Watch with watchOS half-dozen or later tin can receive verification codes when you sign in with your Apple ID, only cannot deed as a trusted device for password resets.

Trusted phone numbers

A trusted phone number is a number that can exist used to receive verification codes by text bulletin or automated phone phone call. You must verify at least one trusted phone number to enroll in 2-gene authentication.

You should also consider verifying an additional phone number y'all can access, such as a domicile phone, or a number used by a family unit member or close friend. Yous tin use this number if you lot temporarily can't access your chief number or your own devices.

Verification codes

Prepare ii-cistron authentication for your Apple ID

Turn on two-factor authentication on your iPhone, iPad, or iPod affect

  1. Go to Settings > [your proper noun] > Password & Security.
  2. Tap Turn On Two-Factor Authentication.
  3. Tap Keep.
  4. Enter the telephone number where yous want to receive verification codes when you sign in. Y'all can cull to receive the codes by text message or automated phone call.
  5. Tap Adjacent.
  6. Enter the verification code to verify your phone number and plough on two-factor authentication.

Y'all might be asked to reply your Apple ID security questions.

Turn on ii-factor authentication on your Mac

  1. Choose Apple menu  > Arrangement Preferences, and then click Apple tree ID.
  2. Click Password & Security under your name.
  3. Next to Two-Factor Authentication, click Plough On.

If you lot're using macOS Mojave or earlier:

  1. Choose Apple menu  > System Preferences, and so click iCloud, and select Account Details.
  2. Click Security.
  3. Click Turn On 2-Gene Hallmark.

Some Apple IDs created in iOS ten.three or macOS ten.12.four and later are protected with ii-gene hallmark by default. In this case, you see that 2-gene authentication is already turned on.

Upgrade to two-gene hallmark on the spider web

  1. Go to appleid.apple.com, then sign in with your Apple ID.
  2. Reply your security questions, so tap Go along.
  3. Y'all'll see a prompt to upgrade your account security. Tap Continue.
  4. Click Upgrade Account Security.
  5. Enter the telephone number where you want to receive verification codes when yous sign in. You tin can cull to receive the codes by text message or automated phone call.
  6. Click Continue.
  7. Enter the verification lawmaking to verify your phone number and turn on two-gene authentication.

If yous have an Apple ID that's not protected past two-gene authentication, some Apple spider web sites might inquire you to update your account.

What to call up when y'all utilise two-factor authentication

Ii-factor authentication significantly improves the security of your Apple ID. After yous turn it on, signing into your account will require both your countersign and admission to your trusted devices or trusted telephone number. To go along your business relationship every bit secure equally possible and help ensure you never lose access, there are a few simple guidelines you lot should follow:

  • Remember your Apple tree ID countersign.
  • Use a device passcode on all your devices.
  • Go on your trusted phone number(s) upwardly to appointment.
  • Keep your trusted devices physically secure.

Manage your account

You lot can manage your trusted telephone numbers, trusted devices, and other business relationship data from your Apple tree ID account page.

Manage your trusted phone numbers

To use 2-gene authentication, y'all need at least one trusted phone number on file where you lot tin receive verification codes. Consider verifying an additional trusted telephone number other than your ain phone number. If your iPhone is your only trusted device and information technology is missing or damaged, you will be unable to receive verification codes required to access your account.

Update your trusted phone number on your Apple tree ID account page

  1. Get to appleid.apple tree.com.
  2. Sign in with your Apple ID.
  3. Go to the Security section and click Edit.

If you want to add a phone number, click Add a Trusted Telephone Number and enter the phone number. Choose to verify the number with a text message or automated phone call, and click Proceed. To remove a trusted phone number, clickx icon next to the phone number you desire to remove.

View and manage your trusted devices

You can view and manage a list of your trusted devices on iOS, macOS, and in the Devices department of your Apple tree ID account page.

On iOS:

  1. Go to Settings > [your proper noun].
  2. Select a device from the listing.

On macOS Catalina or later:

  1. Cull Apple menu  > System Preferences.
  2. Select Apple tree ID.
  3. Select a device from the sidebar.

On macOS Mojave or earlier:

  1. Cull Apple card  > System Preferences.
  2. Select iCloud, then click Business relationship Details.
  3. Click the Devices tab.
  4. Select a device from the list.

On the web:

  1. Go to your Apple tree ID account page.
  2. Sign in with your Apple ID.
  3. Get to the Devices section.

The device list shows the devices that you lot're currently signed in to with your Apple ID. Select a device to view device info like the model and serial number. Beneath that you tin can see other useful data, including whether or non the device is trusted and can exist used to receive Apple tree ID verification codes.

You tin can also remove a trusted device by selecting Remove from Account from the device list. Removing a trusted device will ensure that it can no longer display verification codes and that access to iCloud, and other Apple services on the device, is blocked until you sign in again with two-cistron authentication. If y'all need to observe or erase your device before you remove it from your trusted device list, y'all can use Find My iPhone.

Generate app-specific passwords

With two-gene authentication, you need an app-specific password to sign in to your business relationship using tertiary-party apps or services such every bit electronic mail, contacts, or agenda apps not provided past Apple tree. Follow these steps to generate an app-specific password:

  1. Sign in to your Apple tree ID business relationship page.
  2. Click Generate Countersign below App-Specific Passwords.
  3. Follow the steps on your screen.

After you lot generate your app-specific password, enter or paste it into the password field of the app equally you would usually.

Ofttimes asked questions

Demand help? You might find the answer to your question below.

What if I forget my password?

Yous can reset or modify your countersign from your trusted device or browser when you follow these steps.

On your iPhone, iPad, or iPod bear upon

  1. Go to Settings > [your name].
  2. Tap Password & Security > Change Password.
  3. Enter a new password.

On your Mac

  1. Choose Apple tree menu  > Organization Preferences, and so click Apple tree ID.
  2. Click Password & Security, and then click Change Password.

If you lot're using macOS Mojave or before:

  1. Cull Apple menu  > Organization Preferences, then click iCloud.
  2. Choose Business relationship Details. If you're asked to enter your Apple tree ID countersign, click Forgot Apple ID or password and follow the onscreen instructions. You lot can skip the steps below.
  3. Click Security > Reset Countersign. Before y'all can reset your Apple ID countersign, enter the password used to unlock your Mac.

On the web

If you don't have access to an iPhone, iPad, iPod bear on, or Mac, yous tin can reset or modify your password from iforgot.apple tree.com.

What if I tin can't access a trusted device or didn't receive a verification code?

If you're signing in and don't have a trusted device handy that tin brandish verification codes, you can accept a lawmaking sent to your trusted telephone number via text bulletin or an automated phone call instead. Click Didn't Get a Code on the sign in screen and choose to ship a code to your trusted phone number. Y'all can besides get a code directly from Settings on a trusted device. Learn how to become a verification lawmaking.

If you employ iOS 11.3 or afterwards your iPhone, you might not demand to enter a verification code. In some cases, your trusted phone number tin can exist automatically verified in the groundwork on your iPhone. It's one less thing to do, and your account is all the same protected with two-gene authentication.

If I tin can't sign in, how practice I regain access to my account?

If yous can't sign in, admission a trusted device, reset your countersign, or receive verification codes, you can request account recovery to regain access to your account. Account recovery is an automatic procedure designed to get y'all back in to your account as quickly as possible while denying admission to anyone who might be pretending to be yous. It might take a few days—or longer—depending on what specific account data you can provide to verify your identity.

If yous generated a recovery key, yous tin can utilise your recovery key to regain admission to your account instead. Acquire more than about using a recovery key.

Practise I still need to remember any security questions?

No. With 2-factor authentication, y'all don't need to retrieve any security questions. We verify your identity exclusively using your countersign and verification codes sent to your trusted devices and phone numbers. When y'all enroll in two-cistron authentication, we keep your quondam security questions on file for two weeks in case you need to return your account to its previous security settings. Later that, they're deleted.

Tin can Apple Back up help me regain access to my business relationship?

Apple Back up can reply your questions nearly the account recovery process, but can't verify your identity or expedite the procedure in any manner.

What are the system requirements for two-cistron authentication?

For the best feel, make sure that you meet these arrangement requirements on all of the devices yous use with your Apple ID:

  • iPhone, iPad, or iPod bear on with iOS ix and afterward
  • Mac with Bone Ten El Capitan and iTunes 12.3 and later
  • Apple Watch with watchOS ii and later
  • Apple tree Goggle box Hard disk drive with tvOS
  • Windows PC with iCloud for Windows 5 and iTunes 12.3.3 and subsequently

Tin can Apple IDs created for children apply two-factor authentication?

Yes. Any Apple ID that meets the bones system requirements can enroll in two-factor authentication. Learn more about who can apply two-factor authentication.

What if I don't recognize the location shown in my sign in notification?

When y'all sign in on a new device, y'all'll get a notification on your other trusted devices that includes a map showing the estimate location of the new device. This is an approximate location based on the IP accost the device is currently using, rather than the exact location of the device. The location shown might reflect the network yous're continued to, and non your physical location.

If you know you lot're the person trying to sign in but yous don't recognize the location shown, you can still tap Allow and go on signing in. Still, if you ever run across a notification that your Apple ID is beingness used to sign in on a new device and you're not the i signing in, tap Don't Allow to block the sign in endeavour.

What if I use two-factor authentication on a device running older software?

If you employ 2-gene authentication with devices running older Os versions—like an Apple Telly (second or 3rd generation)—you might be asked to add your six-digit verification lawmaking to the end of your password when signing in. Get your verification code from a trusted device running iOS 9 and later or Bone Ten El Capitan and afterwards, or have information technology sent to your trusted phone number. And so blazon your password followed by the six-digit verification code directly into the password field.

Tin can I turn off two-cistron authentication after I've turned it on?

If you already use 2-gene authentication, you can no longer turn it off. Certain features in the latest versions of iOS and macOS require this extra level of security, which is designed to protect your information. If you recently updated your account, you tin can unenroll within two weeks of enrollment. Just open your enrollment confirmation e-mail and click the link to return to your previous security settings. Go along in mind, this makes your business relationship less secure and ways that y'all can't use features that require higher security.

Is this different than Apple'due south older two-step verification feature?

Yes. Two-gene hallmark is congenital directly into iOS, macOS, tvOS, watchOS, and Apple's web sites. It uses different methods to trust devices and deliver verification codes, and offers a more streamlined user experience. You need ii-cistron authentication to utilize sure features that crave improved security.

If you already use 2-footstep verification and desire to update to 2-gene authentication, larn how to switch to two-factor authentication. If your business relationship isn't eligible for two-cistron authentication, you can still utilise 2-step verification to protect your information.

Data well-nigh products not manufactured by Apple tree, or contained websites non controlled or tested by Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or use of tertiary-party websites or products. Apple makes no representations regarding third-party website accurateness or reliability. Contact the vendor for additional information.

Published Date: