Two-factor authentication for Apple tree ID

Two-factor authentication is an actress layer of security for your Apple ID designed to ensure that you lot're the but person who can access your business relationship, fifty-fifty if someone knows your countersign.

How it works

With two-factor authentication, only you can access your account on a trusted device or the web. When you want to sign in to a new device for the starting time time, yous'll demand to provide ii pieces of information—your countersign and the 6-digit verification lawmaking that's automatically displayed on your trusted devices or sent to your telephone number. Past entering the code, you're verifying that yous trust the new device. For example, if you take an iPhone and are signing into your account for the first fourth dimension on a newly purchased Mac, y'all'll exist prompted to enter your password and the verification code that's automatically displayed on your iPhone.

Because your password alone is no longer enough to admission your account, two-cistron hallmark dramatically improves the security of your Apple ID and all the personal information yous shop with Apple tree.

Once signed in, y'all won't be asked for a verification code on that device again unless you sign out completely, erase the device, or demand to change your password for security reasons. When yous sign in on the web, you can choose to trust your browser, and so you won't exist asked for a verification lawmaking the adjacent time you sign in from that computer.

Trusted devices

A trusted device is an iPhone, iPad, or iPod touch with iOS 9 or subsequently, or Mac with Bone 10 El Capitan or later that you've already signed in to using two-factor authentication. Information technology'due south a device we know is yours and that can be used to verify your identity by displaying a verification code from Apple when yous sign in on a different device or browser. An Apple Scout with watchOS half-dozen or later can receive verification codes when you lot sign in with your Apple ID, only cannot human action every bit a trusted device for countersign resets.

Trusted telephone numbers

A trusted phone number is a number that tin exist used to receive verification codes by text message or automated phone telephone call. Y'all must verify at least one trusted telephone number to enroll in 2-factor hallmark.

You should likewise consider verifying an additional telephone number you can admission, such as a dwelling phone, or a number used by a family member or close friend. You can use this number if you temporarily tin't access your primary number or your own devices.

Verification codes

Set two-gene authentication for your Apple tree ID

Turn on two-factor authentication on your iPhone, iPad, or iPod impact

  1. Go to Settings > [your name] > Password & Security.
  2. Tap Turn On 2-Cistron Authentication.
  3. Tap Go along.
  4. Enter the phone number where you want to receive verification codes when you sign in. Yous can cull to receive the codes by text message or automated call.
  5. Tap Next.
  6. Enter the verification code to verify your telephone number and turn on two-factor authentication.

Yous might be asked to answer your Apple ID security questions.

Turn on two-factor authentication on your Mac

  1. Choose Apple card  > Arrangement Preferences, then click Apple ID.
  2. Click Password & Security under your name.
  3. Adjacent to Two-Factor Authentication, click Turn On.

If you're using macOS Mojave or before:

  1. Choose Apple menu  > System Preferences, and then click iCloud, and select Account Details.
  2. Click Security.
  3. Click Plow On Two-Factor Authentication.

Some Apple tree IDs created in iOS x.three or macOS 10.12.4 and after are protected with 2-factor authentication by default. In this case, you see that 2-gene authentication is already turned on.

Upgrade to two-cistron authentication on the web

  1. Go to appleid.apple.com, then sign in with your Apple tree ID.
  2. Answer your security questions, and then tap Go on.
  3. You'll meet a prompt to upgrade your account security. Tap Proceed.
  4. Click Upgrade Account Security.
  5. Enter the telephone number where you desire to receive verification codes when you sign in. You lot can choose to receive the codes by text message or automated telephone telephone call.
  6. Click Continue.
  7. Enter the verification lawmaking to verify your phone number and turn on ii-factor authentication.

If you accept an Apple ID that'south not protected by ii-cistron authentication, some Apple spider web sites might inquire you to update your account.

What to remember when yous utilise two-gene authentication

2-gene authentication significantly improves the security of your Apple ID. Afterwards you lot turn information technology on, signing into your account will crave both your password and access to your trusted devices or trusted phone number. To keep your account as secure as possible and aid ensure you lot never lose access, at that place are a few simple guidelines yous should follow:

  • Remember your Apple tree ID password.
  • Apply a device passcode on all your devices.
  • Keep your trusted phone number(s) upwardly to engagement.
  • Keep your trusted devices physically secure.

Manage your account

You can manage your trusted phone numbers, trusted devices, and other account data from your Apple tree ID account page.

Manage your trusted phone numbers

To apply two-factor authentication, you need at least i trusted telephone number on file where you tin can receive verification codes. Consider verifying an additional trusted phone number other than your own phone number. If your iPhone is your only trusted device and it is missing or damaged, yous will be unable to receive verification codes required to access your business relationship.

Update your trusted phone number on your Apple ID account page

  1. Go to appleid.apple.com.
  2. Sign in with your Apple ID.
  3. Get to the Security section and click Edit.

If you want to add a telephone number, click Add a Trusted Phone Number and enter the telephone number. Choose to verify the number with a text message or automated telephone call, and click Go on. To remove a trusted phone number, clickx icon adjacent to the phone number yous want to remove.

View and manage your trusted devices

You lot can view and manage a list of your trusted devices on iOS, macOS, and in the Devices department of your Apple ID account page.

On iOS:

  1. Become to Settings > [your name].
  2. Select a device from the list.

On macOS Catalina or later:

  1. Cull Apple menu  > System Preferences.
  2. Select Apple ID.
  3. Select a device from the sidebar.

On macOS Mojave or earlier:

  1. Choose Apple card  > System Preferences.
  2. Select iCloud, then click Business relationship Details.
  3. Click the Devices tab.
  4. Select a device from the list.

On the spider web:

  1. Go to your Apple ID account folio.
  2. Sign in with your Apple ID.
  3. Go to the Devices department.

The device list shows the devices that you're currently signed in to with your Apple tree ID. Select a device to view device info like the model and serial number. Below that you can encounter other useful information, including whether or not the device is trusted and can be used to receive Apple ID verification codes.

You lot can too remove a trusted device by selecting Remove from Account from the device list. Removing a trusted device volition ensure that it tin can no longer brandish verification codes and that admission to iCloud, and other Apple services on the device, is blocked until y'all sign in again with two-factor authentication. If y'all need to find or erase your device before yous remove it from your trusted device listing, you can use Find My iPhone.

Generate app-specific passwords

With two-factor authentication, you need an app-specific password to sign in to your account using third-party apps or services such as electronic mail, contacts, or calendar apps not provided by Apple. Follow these steps to generate an app-specific password:

  1. Sign in to your Apple tree ID business relationship page.
  2. Click Generate Password beneath App-Specific Passwords.
  3. Follow the steps on your screen.

After you generate your app-specific password, enter or paste information technology into the password field of the app every bit you would normally.

Frequently asked questions

Need help? You lot might detect the reply to your question below.

What if I forget my countersign?

You tin can reset or change your password from your trusted device or browser when you lot follow these steps.

On your iPhone, iPad, or iPod touch on

  1. Go to Settings > [your proper noun].
  2. Tap Password & Security > Change Password.
  3. Enter a new password.

On your Mac

  1. Cull Apple menu  > Arrangement Preferences, then click Apple ID.
  2. Click Password & Security, then click Alter Password.

If you're using macOS Mojave or earlier:

  1. Choose Apple tree card  > Organisation Preferences, then click iCloud.
  2. Cull Account Details. If you're asked to enter your Apple tree ID countersign, click Forgot Apple ID or password and follow the onscreen instructions. You can skip the steps below.
  3. Click Security > Reset Countersign. Earlier y'all can reset your Apple ID password, enter the password used to unlock your Mac.

On the web

If yous don't have access to an iPhone, iPad, iPod touch, or Mac, you can reset or change your password from iforgot.apple.com.

What if I tin can't access a trusted device or didn't receive a verification code?

If you're signing in and don't have a trusted device handy that can display verification codes, you can take a code sent to your trusted phone number via text message or an automated phone phone call instead. Click Didn't Get a Code on the sign in screen and choose to transport a code to your trusted telephone number. You tin can too get a code directly from Settings on a trusted device. Larn how to get a verification code.

If you employ iOS eleven.iii or afterward your iPhone, y'all might not need to enter a verification code. In some cases, your trusted phone number can be automatically verified in the background on your iPhone. It's ane less thing to do, and your account is all the same protected with ii-factor authentication.

If I can't sign in, how do I regain admission to my account?

If you tin can't sign in, access a trusted device, reset your password, or receive verification codes, y'all can request account recovery to regain access to your account. Account recovery is an automatic process designed to go you lot back in to your account as apace as possible while denying admission to anyone who might be pretending to be yous. It might take a few days—or longer—depending on what specific account data you can provide to verify your identity.

If you generated a recovery key, you tin can employ your recovery central to regain admission to your account instead. Larn more than about using a recovery key.

Practice I nonetheless demand to remember any security questions?

No. With two-factor authentication, you don't need to remember any security questions. We verify your identity exclusively using your password and verification codes sent to your trusted devices and phone numbers. When y'all enroll in two-cistron hallmark, nosotros continue your former security questions on file for two weeks in instance y'all need to render your business relationship to its previous security settings. After that, they're deleted.

Tin Apple Support help me regain access to my account?

Apple Back up can answer your questions about the account recovery process, but tin't verify your identity or expedite the process in any way.

What are the system requirements for two-cistron authentication?

For the best experience, make sure that you lot see these system requirements on all of the devices you lot use with your Apple tree ID:

  • iPhone, iPad, or iPod impact with iOS 9 and later
  • Mac with OS 10 El Capitan and iTunes 12.3 and later
  • Apple Sentinel with watchOS 2 and later
  • Apple Idiot box Hard disk drive with tvOS
  • Windows PC with iCloud for Windows five and iTunes 12.3.iii and later

Can Apple IDs created for children utilise 2-factor authentication?

Yes. Any Apple ID that meets the basic organisation requirements can enroll in ii-factor hallmark. Larn more about who can use two-factor authentication.

What if I don't recognize the location shown in my sign in notification?

When y'all sign in on a new device, you lot'll go a notification on your other trusted devices that includes a map showing the approximate location of the new device. This is an approximate location based on the IP address the device is currently using, rather than the exact location of the device. The location shown might reflect the network you're connected to, and not your physical location.

If you know you lot're the person trying to sign in but yous don't recognize the location shown, you can still tap Allow and continue signing in. All the same, if you ever see a notification that your Apple ID is existence used to sign in on a new device and yous're not the 1 signing in, tap Don't Let to cake the sign in attempt.

What if I use ii-factor authentication on a device running older software?

If you lot utilize ii-factor hallmark with devices running older OS versions—similar an Apple tree Television (2nd or 3rd generation)—you might exist asked to add your half-dozen-digit verification lawmaking to the end of your password when signing in. Get your verification lawmaking from a trusted device running iOS nine and subsequently or OS 10 El Capitan and later, or accept it sent to your trusted phone number. Then blazon your password followed by the 6-digit verification code directly into the password field.

Can I turn off two-factor authentication after I've turned it on?

If yous already utilise ii-factor authentication, you can no longer plow it off. Certain features in the latest versions of iOS and macOS require this actress level of security, which is designed to protect your data. If yous recently updated your account, you tin can unenroll within two weeks of enrollment. Just open your enrollment confirmation e-mail and click the link to return to your previous security settings. Keep in mind, this makes your business relationship less secure and means that you can't apply features that require higher security.

Is this different than Apple tree's older ii-step verification feature?

Yes. Two-cistron authentication is built straight into iOS, macOS, tvOS, watchOS, and Apple's spider web sites. It uses dissimilar methods to trust devices and deliver verification codes, and offers a more streamlined user experience. You need two-factor authentication to use certain features that require improved security.

If y'all already employ two-step verification and want to update to ii-factor authentication, learn how to switch to two-factor authentication. If your account isn't eligible for 2-factor authentication, yous tin can nonetheless utilize two-pace verification to protect your information.

Information about products not manufactured past Apple, or independent websites not controlled or tested by Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or use of third-party websites or products. Apple makes no representations regarding third-party website accurateness or reliability. Contact the vendor for additional data.

Published Date: