Two-factor hallmark for Apple tree ID

2-factor hallmark is an extra layer of security for your Apple tree ID designed to ensure that you lot're the just person who can admission your account, even if someone knows your countersign.

How it works

With 2-factor authentication, merely yous tin access your business relationship on a trusted device or the web. When y'all want to sign in to a new device for the beginning time, you'll need to provide ii pieces of information—your countersign and the six-digit verification code that's automatically displayed on your trusted devices or sent to your phone number. By entering the code, you're verifying that you trust the new device. For example, if you lot take an iPhone and are signing into your account for the showtime time on a newly purchased Mac, you'll be prompted to enter your password and the verification code that's automatically displayed on your iPhone.

Because your countersign alone is no longer enough to access your account, two-factor authentication dramatically improves the security of your Apple ID and all the personal information you shop with Apple.

In one case signed in, you won't exist asked for a verification code on that device once again unless yous sign out completely, erase the device, or need to alter your password for security reasons. When yous sign in on the spider web, yous tin choose to trust your browser, and so you won't be asked for a verification code the adjacent fourth dimension you sign in from that reckoner.

Trusted devices

A trusted device is an iPhone, iPad, or iPod touch on with iOS 9 or later, or Mac with OS X El Capitan or after that y'all've already signed in to using ii-factor authentication. It's a device nosotros know is yours and that tin exist used to verify your identity by displaying a verification code from Apple tree when you sign in on a different device or browser. An Apple tree Watch with watchOS vi or after can receive verification codes when y'all sign in with your Apple ID, but cannot act as a trusted device for password resets.

Trusted phone numbers

A trusted phone number is a number that can be used to receive verification codes by text message or automated phone call. You must verify at to the lowest degree ane trusted telephone number to enroll in 2-factor authentication.

Y'all should besides consider verifying an additional phone number you can access, such equally a habitation phone, or a number used by a family member or shut friend. Y'all tin can use this number if y'all temporarily can't admission your principal number or your ain devices.

Verification codes

Ready up two-factor authentication for your Apple ID

Plough on two-factor authentication on your iPhone, iPad, or iPod touch on

  1. Go to Settings > [your name] > Countersign & Security.
  2. Tap Turn On Two-Factor Authentication.
  3. Tap Continue.
  4. Enter the phone number where you lot want to receive verification codes when you sign in. You can choose to receive the codes by text message or automatic telephone call.
  5. Tap Next.
  6. Enter the verification lawmaking to verify your telephone number and turn on two-gene authentication.

You might be asked to reply your Apple tree ID security questions.

Plough on two-factor authentication on your Mac

  1. Choose Apple menu  > System Preferences, so click Apple ID.
  2. Click Password & Security under your name.
  3. Next to Two-Factor Authentication, click Turn On.

If yous're using macOS Mojave or earlier:

  1. Choose Apple menu  > Organization Preferences, and then click iCloud, and select Account Details.
  2. Click Security.
  3. Click Turn On Two-Factor Authentication.

Some Apple IDs created in iOS 10.three or macOS 10.12.4 and later are protected with two-factor hallmark past default. In this example, you see that two-factor authentication is already turned on.

Upgrade to ii-cistron authentication on the web

  1. Become to appleid.apple.com, then sign in with your Apple tree ID.
  2. Answer your security questions, then tap Continue.
  3. You'll see a prompt to upgrade your business relationship security. Tap Continue.
  4. Click Upgrade Account Security.
  5. Enter the phone number where you want to receive verification codes when you sign in. You tin cull to receive the codes past text message or automated phone telephone call.
  6. Click Continue.
  7. Enter the verification lawmaking to verify your phone number and turn on two-gene hallmark.

If you take an Apple ID that's not protected by two-cistron authentication, some Apple web sites might ask yous to update your business relationship.

What to remember when you use 2-gene hallmark

Two-factor authentication significantly improves the security of your Apple ID. Later you lot turn information technology on, signing into your account will require both your password and access to your trusted devices or trusted telephone number. To keep your account as secure equally possible and help ensure you never lose access, there are a few unproblematic guidelines you lot should follow:

  • Remember your Apple ID password.
  • Utilise a device passcode on all your devices.
  • Keep your trusted phone number(s) up to date.
  • Go on your trusted devices physically secure.

Manage your account

You can manage your trusted telephone numbers, trusted devices, and other business relationship data from your Apple ID account page.

Manage your trusted phone numbers

To utilize two-gene hallmark, you need at least one trusted phone number on file where you tin can receive verification codes. Consider verifying an additional trusted telephone number other than your own phone number. If your iPhone is your only trusted device and information technology is missing or damaged, you volition be unable to receive verification codes required to access your account.

Update your trusted telephone number on your Apple ID account page

  1. Go to appleid.apple.com.
  2. Sign in with your Apple ID.
  3. Go to the Security department and click Edit.

If you desire to add a telephone number, click Add a Trusted Telephone Number and enter the phone number. Cull to verify the number with a text bulletin or automated telephone telephone call, and click Continue. To remove a trusted telephone number, clickx icon next to the phone number you want to remove.

View and manage your trusted devices

You can view and manage a listing of your trusted devices on iOS, macOS, and in the Devices section of your Apple ID business relationship page.

On iOS:

  1. Go to Settings > [your name].
  2. Select a device from the listing.

On macOS Catalina or afterwards:

  1. Choose Apple tree menu  > System Preferences.
  2. Select Apple ID.
  3. Select a device from the sidebar.

On macOS Mojave or earlier:

  1. Choose Apple bill of fare  > System Preferences.
  2. Select iCloud, then click Business relationship Details.
  3. Click the Devices tab.
  4. Select a device from the listing.

On the web:

  1. Go to your Apple tree ID account folio.
  2. Sign in with your Apple tree ID.
  3. Go to the Devices section.

The device listing shows the devices that you're currently signed in to with your Apple ID. Select a device to view device info like the model and serial number. Below that you tin see other useful information, including whether or not the device is trusted and tin exist used to receive Apple ID verification codes.

Yous can also remove a trusted device past selecting Remove from Account from the device list. Removing a trusted device will ensure that it can no longer display verification codes and that access to iCloud, and other Apple services on the device, is blocked until yous sign in again with two-factor authentication. If you need to find or erase your device earlier yous remove it from your trusted device list, yous tin use Find My iPhone.

Generate app-specific passwords

With two-gene hallmark, y'all demand an app-specific password to sign in to your business relationship using tertiary-party apps or services such as email, contacts, or calendar apps not provided past Apple tree. Follow these steps to generate an app-specific password:

  1. Sign in to your Apple ID account folio.
  2. Click Generate Countersign below App-Specific Passwords.
  3. Follow the steps on your screen.

Later you generate your app-specific password, enter or paste it into the password field of the app as you would normally.

Frequently asked questions

Need help? You might find the answer to your question beneath.

What if I forget my password?

Y'all can reset or change your countersign from your trusted device or browser when you follow these steps.

On your iPhone, iPad, or iPod bear on

  1. Go to Settings > [your name].
  2. Tap Password & Security > Change Countersign.
  3. Enter a new password.

On your Mac

  1. Choose Apple menu  > System Preferences, then click Apple tree ID.
  2. Click Password & Security, so click Alter Password.

If you're using macOS Mojave or earlier:

  1. Choose Apple menu  > System Preferences, and so click iCloud.
  2. Cull Account Details. If you're asked to enter your Apple tree ID password, click Forgot Apple tree ID or countersign and follow the onscreen instructions. Y'all tin skip the steps beneath.
  3. Click Security > Reset Password. Before y'all tin reset your Apple ID countersign, enter the password used to unlock your Mac.

On the web

If you lot don't have admission to an iPhone, iPad, iPod affect, or Mac, you can reset or change your password from iforgot.apple.com.

What if I can't access a trusted device or didn't receive a verification code?

If y'all're signing in and don't take a trusted device handy that can display verification codes, you lot can have a lawmaking sent to your trusted telephone number via text message or an automated telephone call instead. Click Didn't Get a Code on the sign in screen and choose to send a lawmaking to your trusted phone number. You tin can also get a code directly from Settings on a trusted device. Learn how to become a verification code.

If y'all apply iOS 11.3 or subsequently your iPhone, you might not need to enter a verification code. In some cases, your trusted telephone number can be automatically verified in the background on your iPhone. It'southward 1 less affair to do, and your business relationship is still protected with two-factor hallmark.

If I can't sign in, how practise I regain access to my business relationship?

If you lot tin't sign in, admission a trusted device, reset your password, or receive verification codes, you can asking account recovery to regain admission to your account. Account recovery is an automated process designed to become you back in to your business relationship as apace as possible while denying access to anyone who might be pretending to be y'all. It might take a few days—or longer—depending on what specific account information y'all can provide to verify your identity.

If you generated a recovery cardinal, y'all can use your recovery key to regain access to your account instead. Learn more than nearly using a recovery cardinal.

Practise I even so need to think any security questions?

No. With two-factor authentication, you don't demand to remember any security questions. We verify your identity exclusively using your password and verification codes sent to your trusted devices and phone numbers. When you enroll in two-cistron hallmark, we keep your old security questions on file for two weeks in instance you need to return your account to its previous security settings. Later that, they're deleted.

Tin can Apple Support help me regain access to my account?

Apple Support can respond your questions about the account recovery process, only tin can't verify your identity or expedite the process in whatsoever way.

What are the system requirements for two-factor authentication?

For the best experience, make sure that you lot meet these system requirements on all of the devices you use with your Apple ID:

  • iPhone, iPad, or iPod touch with iOS 9 and later
  • Mac with OS X El Capitan and iTunes 12.3 and later on
  • Apple Picket with watchOS 2 and later
  • Apple Tv set Hd with tvOS
  • Windows PC with iCloud for Windows 5 and iTunes 12.3.3 and after

Tin Apple IDs created for children utilize ii-factor authentication?

Yes. Any Apple ID that meets the basic system requirements tin can enroll in two-factor authentication. Learn more near who can employ two-cistron hallmark.

What if I don't recognize the location shown in my sign in notification?

When you sign in on a new device, y'all'll get a notification on your other trusted devices that includes a map showing the approximate location of the new device. This is an approximate location based on the IP address the device is currently using, rather than the exact location of the device. The location shown might reflect the network you're continued to, and not your physical location.

If you know you're the person trying to sign in but you don't recognize the location shown, you can notwithstanding tap Let and continue signing in. However, if yous ever run across a notification that your Apple ID is beingness used to sign in on a new device and you're not the i signing in, tap Don't Permit to block the sign in try.

What if I employ two-gene authentication on a device running older software?

If you use two-factor authentication with devices running older OS versions—similar an Apple tree Tv (2nd or 3rd generation)—you might be asked to add together your 6-digit verification code to the terminate of your password when signing in. Get your verification code from a trusted device running iOS 9 and later or Os X El Capitan and later, or have it sent to your trusted phone number. Then type your password followed by the six-digit verification code straight into the password field.

Can I turn off 2-factor authentication later on I've turned it on?

If y'all already use two-gene authentication, you tin no longer turn information technology off. Certain features in the latest versions of iOS and macOS crave this extra level of security, which is designed to protect your information. If you lot recently updated your account, you tin can unenroll within two weeks of enrollment. But open your enrollment confirmation email and click the link to return to your previous security settings. Keep in mind, this makes your account less secure and ways that you can't use features that require college security.

Is this unlike than Apple's older two-footstep verification feature?

Yes. Two-factor authentication is built directly into iOS, macOS, tvOS, watchOS, and Apple tree'southward web sites. Information technology uses different methods to trust devices and deliver verification codes, and offers a more than streamlined user feel. You need two-factor authentication to utilise certain features that require improved security.

If yous already use ii-stride verification and want to update to ii-gene authentication, larn how to switch to two-factor authentication. If your account isn't eligible for 2-factor hallmark, you tin can still use ii-step verification to protect your data.

Information about products not manufactured by Apple, or independent websites not controlled or tested by Apple tree, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or use of third-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. Contact the vendor for additional information.

Published Date: