Two-factor authentication for Apple ID

Two-factor authentication is an actress layer of security for your Apple ID designed to ensure that y'all're the only person who can admission your account, even if someone knows your password.

How information technology works

With ii-factor hallmark, only you can admission your account on a trusted device or the web. When y'all desire to sign in to a new device for the starting time time, you lot'll demand to provide 2 pieces of data—your countersign and the vi-digit verification code that'southward automatically displayed on your trusted devices or sent to your telephone number. By inbound the code, yous're verifying that you lot trust the new device. For example, if you have an iPhone and are signing into your account for the first fourth dimension on a newly purchased Mac, y'all'll be prompted to enter your password and the verification code that'southward automatically displayed on your iPhone.

Because your password alone is no longer enough to access your business relationship, two-factor authentication dramatically improves the security of your Apple tree ID and all the personal information you lot store with Apple tree.

Once signed in, yous won't be asked for a verification code on that device once more unless you sign out completely, erase the device, or need to modify your password for security reasons. When yous sign in on the web, you tin choose to trust your browser, and so you won't be asked for a verification code the next time you sign in from that computer.

Trusted devices

A trusted device is an iPhone, iPad, or iPod touch on with iOS nine or later, or Mac with OS Ten El Capitan or later that you've already signed in to using two-factor authentication. It'south a device we know is yours and that can exist used to verify your identity past displaying a verification code from Apple when you sign in on a different device or browser. An Apple Watch with watchOS 6 or later can receive verification codes when you lot sign in with your Apple ID, but cannot deed as a trusted device for password resets.

Trusted phone numbers

A trusted phone number is a number that can be used to receive verification codes past text message or automated phone call. You must verify at least one trusted telephone number to enroll in two-factor authentication.

You should also consider verifying an additional telephone number you can access, such equally a dwelling house phone, or a number used by a family unit member or close friend. You tin use this number if you temporarily can't access your master number or your ain devices.

Verification codes

Ready two-factor hallmark for your Apple ID

Turn on two-gene hallmark on your iPhone, iPad, or iPod touch

  1. Go to Settings > [your proper name] > Password & Security.
  2. Tap Turn On Ii-Factor Hallmark.
  3. Tap Proceed.
  4. Enter the telephone number where you want to receive verification codes when you sign in. You tin can choose to receive the codes by text bulletin or automated telephone phone call.
  5. Tap Side by side.
  6. Enter the verification code to verify your phone number and plough on two-factor authentication.

Y'all might exist asked to answer your Apple tree ID security questions.

Turn on two-factor hallmark on your Mac

  1. Choose Apple bill of fare  > System Preferences, then click Apple ID.
  2. Click Password & Security under your name.
  3. Next to Two-Factor Authentication, click Plow On.

If you're using macOS Mojave or earlier:

  1. Choose Apple menu  > Organisation Preferences, so click iCloud, and select Account Details.
  2. Click Security.
  3. Click Plow On 2-Factor Authentication.

Some Apple tree IDs created in iOS ten.3 or macOS ten.12.4 and later are protected with two-factor authentication by default. In this case, you run across that two-cistron authentication is already turned on.

Upgrade to ii-factor authentication on the web

  1. Get to appleid.apple.com, then sign in with your Apple ID.
  2. Answer your security questions, then tap Continue.
  3. You'll run across a prompt to upgrade your account security. Tap Continue.
  4. Click Upgrade Business relationship Security.
  5. Enter the phone number where you want to receive verification codes when you sign in. Yous tin cull to receive the codes by text message or automatic telephone phone call.
  6. Click Continue.
  7. Enter the verification code to verify your telephone number and turn on two-gene hallmark.

If you take an Apple tree ID that'southward not protected by two-cistron authentication, some Apple spider web sites might ask you to update your account.

What to remember when you lot use two-factor authentication

Two-factor hallmark significantly improves the security of your Apple ID. After you turn it on, signing into your business relationship will require both your countersign and access to your trusted devices or trusted phone number. To proceed your account equally secure equally possible and help ensure y'all never lose admission, there are a few simple guidelines you should follow:

  • Remember your Apple ID password.
  • Use a device passcode on all your devices.
  • Keep your trusted phone number(s) up to date.
  • Keep your trusted devices physically secure.

Manage your account

You can manage your trusted phone numbers, trusted devices, and other account information from your Apple ID account page.

Manage your trusted telephone numbers

To use two-factor hallmark, you need at to the lowest degree one trusted telephone number on file where you tin can receive verification codes. Consider verifying an additional trusted phone number other than your own phone number. If your iPhone is your only trusted device and it is missing or damaged, you will be unable to receive verification codes required to access your account.

Update your trusted telephone number on your Apple ID account page

  1. Get to appleid.apple.com.
  2. Sign in with your Apple ID.
  3. Become to the Security department and click Edit.

If you want to add a telephone number, click Add a Trusted Phone Number and enter the telephone number. Choose to verify the number with a text message or automated telephone call, and click Go along. To remove a trusted telephone number, clickx icon next to the phone number y'all want to remove.

View and manage your trusted devices

You can view and manage a list of your trusted devices on iOS, macOS, and in the Devices section of your Apple ID business relationship folio.

On iOS:

  1. Become to Settings > [your name].
  2. Select a device from the listing.

On macOS Catalina or later on:

  1. Choose Apple menu  > System Preferences.
  2. Select Apple ID.
  3. Select a device from the sidebar.

On macOS Mojave or earlier:

  1. Choose Apple menu  > System Preferences.
  2. Select iCloud, and then click Account Details.
  3. Click the Devices tab.
  4. Select a device from the list.

On the spider web:

  1. Become to your Apple ID account page.
  2. Sign in with your Apple ID.
  3. Get to the Devices department.

The device list shows the devices that you're currently signed in to with your Apple ID. Select a device to view device info like the model and serial number. Below that yous can run into other useful information, including whether or not the device is trusted and can be used to receive Apple ID verification codes.

You can also remove a trusted device by selecting Remove from Account from the device list. Removing a trusted device will ensure that it can no longer display verification codes and that admission to iCloud, and other Apple services on the device, is blocked until you sign in over again with two-factor authentication. If you need to find or erase your device before you remove it from your trusted device list, y'all can use Find My iPhone.

Generate app-specific passwords

With two-gene authentication, you lot need an app-specific password to sign in to your account using 3rd-party apps or services such as email, contacts, or calendar apps non provided by Apple. Follow these steps to generate an app-specific password:

  1. Sign in to your Apple tree ID business relationship page.
  2. Click Generate Password below App-Specific Passwords.
  3. Follow the steps on your screen.

Later you generate your app-specific password, enter or paste information technology into the password field of the app every bit y'all would normally.

Often asked questions

Demand help? Yous might detect the answer to your question beneath.

What if I forget my password?

You tin can reset or change your countersign from your trusted device or browser when you lot follow these steps.

On your iPhone, iPad, or iPod impact

  1. Go to Settings > [your proper name].
  2. Tap Password & Security > Alter Password.
  3. Enter a new password.

On your Mac

  1. Choose Apple tree bill of fare  > System Preferences, so click Apple tree ID.
  2. Click Password & Security, then click Modify Password.

If you lot're using macOS Mojave or earlier:

  1. Choose Apple card  > Arrangement Preferences, then click iCloud.
  2. Cull Business relationship Details. If you're asked to enter your Apple ID password, click Forgot Apple ID or password and follow the onscreen instructions. You tin skip the steps below.
  3. Click Security > Reset Password. Before yous tin reset your Apple ID password, enter the countersign used to unlock your Mac.

On the spider web

If you don't have access to an iPhone, iPad, iPod touch, or Mac, yous tin reset or change your password from iforgot.apple.com.

What if I can't admission a trusted device or didn't receive a verification code?

If you're signing in and don't have a trusted device handy that can display verification codes, you tin have a lawmaking sent to your trusted phone number via text message or an automated telephone telephone call instead. Click Didn't Get a Code on the sign in screen and choose to ship a code to your trusted telephone number. You can besides become a code direct from Settings on a trusted device. Larn how to get a verification code.

If you use iOS 11.3 or later on your iPhone, you might not demand to enter a verification code. In some cases, your trusted telephone number can exist automatically verified in the groundwork on your iPhone. It'south ane less thing to do, and your business relationship is nonetheless protected with ii-factor authentication.

If I can't sign in, how do I regain admission to my account?

If you can't sign in, admission a trusted device, reset your password, or receive verification codes, y'all tin request business relationship recovery to regain access to your account. Account recovery is an automatic process designed to become you dorsum in to your account every bit quickly as possible while denying admission to anyone who might exist pretending to exist you. Information technology might accept a few days—or longer—depending on what specific account information you can provide to verify your identity.

If you generated a recovery central, you can utilize your recovery primal to regain access to your business relationship instead. Larn more than nearly using a recovery fundamental.

Do I still need to remember whatsoever security questions?

No. With ii-factor authentication, yous don't demand to think any security questions. We verify your identity exclusively using your password and verification codes sent to your trusted devices and telephone numbers. When you enroll in two-cistron authentication, we go on your one-time security questions on file for two weeks in case you need to return your business relationship to its previous security settings. Subsequently that, they're deleted.

Tin can Apple Back up help me regain admission to my account?

Apple tree Support can answer your questions well-nigh the account recovery procedure, but can't verify your identity or expedite the process in whatever way.

What are the system requirements for 2-gene authentication?

For the best experience, make certain that you lot meet these system requirements on all of the devices y'all use with your Apple ID:

  • iPhone, iPad, or iPod impact with iOS 9 and later
  • Mac with Bone X El Capitan and iTunes 12.three and later
  • Apple Watch with watchOS two and after
  • Apple Goggle box HD with tvOS
  • Windows PC with iCloud for Windows 5 and iTunes 12.3.3 and later

Tin Apple tree IDs created for children use 2-gene authentication?

Yeah. Whatsoever Apple tree ID that meets the basic organisation requirements can enroll in two-factor authentication. Learn more virtually who can employ two-factor authentication.

What if I don't recognize the location shown in my sign in notification?

When you sign in on a new device, yous'll get a notification on your other trusted devices that includes a map showing the approximate location of the new device. This is an gauge location based on the IP accost the device is currently using, rather than the verbal location of the device. The location shown might reflect the network y'all're connected to, and non your physical location.

If you know you're the person trying to sign in but you don't recognize the location shown, you can however tap Permit and continue signing in. However, if y'all ever see a notification that your Apple ID is being used to sign in on a new device and y'all're not the 1 signing in, tap Don't Allow to block the sign in attempt.

What if I utilise ii-gene hallmark on a device running older software?

If you use ii-factor hallmark with devices running older OS versions—similar an Apple tree Tv set (2d or 3rd generation)—you might exist asked to add your vi-digit verification lawmaking to the cease of your password when signing in. Go your verification code from a trusted device running iOS nine and afterwards or OS X El Capitan and afterward, or have information technology sent to your trusted phone number. Then type your password followed by the half dozen-digit verification code directly into the countersign field.

Can I plough off two-factor authentication afterward I've turned it on?

If you already utilise two-gene authentication, you can no longer turn information technology off. Certain features in the latest versions of iOS and macOS require this extra level of security, which is designed to protect your data. If you recently updated your account, you can unenroll within two weeks of enrollment. Simply open your enrollment confirmation email and click the link to return to your previous security settings. Keep in mind, this makes your business relationship less secure and ways that you tin't utilise features that require college security.

Is this different than Apple's older two-step verification characteristic?

Aye. Two-cistron hallmark is built straight into iOS, macOS, tvOS, watchOS, and Apple tree's web sites. Information technology uses dissimilar methods to trust devices and deliver verification codes, and offers a more streamlined user feel. You need 2-cistron authentication to apply certain features that require improved security.

If you already utilise two-step verification and want to update to 2-factor authentication, larn how to switch to two-cistron authentication. If your account isn't eligible for two-gene authentication, you can all the same utilize two-step verification to protect your information.

Data about products not manufactured by Apple tree, or independent websites not controlled or tested past Apple, is provided without recommendation or endorsement. Apple tree assumes no responsibility with regard to the selection, operation, or utilise of third-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. Contact the vendor for additional information.

Published Date: