Apple introduced an additional layer of security for iPhone, iPad and Mac users in 2013 by rolling out two-step verification for Apple ID accounts. Two-step verification prevents anyone but you from accessing your Apple ID account, even if they know the password, by requiring a four-digit verification code sent via SMS or Find My iPhone on trusted devices. When you enable two-step verification, you must register at least one trusted device capable of receiving SMS text messages.
/article-new/2013/03/twostepverification.jpg?lossy)
Once activated, two-step authentication is required when managing your Apple ID through My Apple ID, signing into iCloud, or making iTunes, iBooks or App Store purchases from a new device. Apple has also expanded two-step authentication to iMessage and FaceTime, requiring users to input an authentication code from a verified device on accounts that have two-factor verification enabled to prevent unauthorized entry attempts through both services.
Overview
Steps to Enable Two-Step Verification
- Sign in to your Apple ID.
- Click on "Get Started…" under Security > Two-Step Verification.
- Answer your Apple ID security questions if set and click Continue.
- Read "Getting Started with Two-Step Verification" and click Continue.
- Add a trusted phone number that can receive SMS text messages and click Continue.
- A text message with a verification code will be sent to your trusted phone number. Enter the code and click Verify.
- Verify your trusted iPhone, iPad or iPod touch devices with Find My iPhone enabled and click Continue. Or click Skip This Step.
- Print or write down your Recovery Key to access your Apple ID account if you ever forget your password or lose your trusted devices.
- Confirm your Recovery Key and click Confirm.
- Click on the checkbox if you agree to Apple's terms and conditions and click on Enable Two-Step Verification.
/article-new/2015/02/Apple-ID-sign-in.jpg?lossy)
/article-new/2015/02/Two-Step-Verification-Apple-ID-1.jpg?lossy)
/article-new/2015/02/Apple-ID-security-questions.jpg?lossy)
/article-new/2015/02/Apple-ID-getting-started-two-step.jpg?lossy)
/article-new/2015/02/Apple-ID-two-step-phone-number.jpg?lossy)
/article-new/2015/02/Apple-ID-verify-phone.jpg?lossy)
/article-new/2015/02/verify-trusted-Apple-ID.jpg?lossy)
/article-new/2015/02/Apple-ID-recovery-key1.jpg?lossy)
/article-new/2015/02/Apple-ID-confirm-recovery-key.jpg?lossy)
/article-new/2015/02/Apple-ID-enable-two-step.jpg?lossy)
Final Words
To ensure continued access to your Apple ID account after enabling two-step verification, it is essential that you record your recovery key in a safe place. Losing your two-factor recovery key could permanently lock you out of your Apple ID account, especially in the event you are being hacked. Without the recovery key, you will be forced to create a new Apple ID.
Two-step verification may provide an additional layer of security, but it is still highly recommended that you set a secure password for your Apple ID account. Avoid using common names, phrases or dictionary words in your password, and try to use as many lowercase and uppercase letters, numbers and symbols as possible.
Top Rated Comments
(View all)This is just adding a new layer of notifications that I tend to think I don't want.
Please note: I have twice specified that this is my experience and my opinion. YMMV.
Also, have your significant other's cell phone be a 2nd factor for your account, and your cell be a 2nd factor for your SO's account. You can have multiple cell phone numbers as 2nd factors.
This is dumb.
Wasn't the iPhone's fingerprint scanner supposed to do away with passwords?
No.
Basically, if you and your SO both have Apple IDs, add each others cell phone numbers to the list of 2nd factor devices.
Pretty straightforward what you are saying. I currently have two-step verification enabled with my phone as both my iOS verified device and my SMS verified device. It makes sense to add someone you trust, like a spouse, to the SMS verified device list in case your phone goes missing. It acts as sort of a backup to not needing to use the Recovery Key.Speaking of the Recovery Key, take Apple seriously when they say you should keep it available but safe. Copy it into 1Password, LastPass, or similar software/service if you don't feel like keeping it on a piece of paper.
My password is pretty good already and Apple has already made me change it at least once before.
I'm not interested.