2-factor authentication for Apple ID

Two-factor authentication is an extra layer of security for your Apple ID designed to ensure that you're the only person who can admission your account, fifty-fifty if someone knows your countersign.

How it works

With ii-factor authentication, only you lot can access your account on a trusted device or the web. When you want to sign in to a new device for the first time, y'all'll need to provide two pieces of information—your password and the six-digit verification code that's automatically displayed on your trusted devices or sent to your telephone number. By entering the code, you're verifying that you trust the new device. For example, if you have an iPhone and are signing into your account for the start fourth dimension on a newly purchased Mac, you'll be prompted to enter your password and the verification code that's automatically displayed on your iPhone.

Considering your countersign alone is no longer enough to access your account, ii-gene hallmark dramatically improves the security of your Apple tree ID and all the personal information you store with Apple.

Once signed in, you won't be asked for a verification code on that device again unless you sign out completely, erase the device, or demand to change your password for security reasons. When you sign in on the web, yous can choose to trust your browser, so y'all won't be asked for a verification code the next time you sign in from that computer.

Trusted devices

A trusted device is an iPhone, iPad, or iPod touch with iOS 9 or later, or Mac with Os X El Capitan or later on that you've already signed in to using two-factor authentication. It's a device we know is yours and that tin be used to verify your identity past displaying a verification code from Apple when y'all sign in on a different device or browser. An Apple Watch with watchOS 6 or afterward tin can receive verification codes when you sign in with your Apple ID, simply cannot act as a trusted device for password resets.

Trusted phone numbers

A trusted phone number is a number that can be used to receive verification codes past text message or automated phone call. You must verify at least one trusted telephone number to enroll in two-factor authentication.

You lot should besides consider verifying an additional phone number you can admission, such every bit a home phone, or a number used by a family member or shut friend. Yous can employ this number if yous temporarily can't access your principal number or your own devices.

Verification codes

Fix ii-factor authentication for your Apple ID

Turn on 2-gene authentication on your iPhone, iPad, or iPod touch

  1. Go to Settings > [your name] > Countersign & Security.
  2. Tap Turn On Two-Gene Authentication.
  3. Tap Continue.
  4. Enter the phone number where you want to receive verification codes when y'all sign in. You tin can cull to receive the codes by text bulletin or automatic phone call.
  5. Tap Next.
  6. Enter the verification code to verify your telephone number and turn on 2-cistron authentication.

You might be asked to answer your Apple ID security questions.

Plough on ii-cistron hallmark on your Mac

  1. Choose Apple card  > Arrangement Preferences, so click Apple ID.
  2. Click Countersign & Security under your proper noun.
  3. Side by side to Two-Cistron Authentication, click Plough On.

If you're using macOS Mojave or earlier:

  1. Choose Apple menu  > System Preferences, then click iCloud, and select Business relationship Details.
  2. Click Security.
  3. Click Turn On Two-Gene Authentication.

Some Apple IDs created in iOS 10.3 or macOS 10.12.four and later are protected with two-factor authentication by default. In this case, you run across that ii-factor authentication is already turned on.

Upgrade to two-gene authentication on the web

  1. Go to appleid.apple.com, and then sign in with your Apple ID.
  2. Answer your security questions, then tap Continue.
  3. You'll run across a prompt to upgrade your account security. Tap Proceed.
  4. Click Upgrade Business relationship Security.
  5. Enter the telephone number where you want to receive verification codes when y'all sign in. You tin choose to receive the codes by text bulletin or automatic phone phone call.
  6. Click Continue.
  7. Enter the verification code to verify your phone number and turn on two-factor authentication.

If you lot have an Apple tree ID that's not protected by 2-factor authentication, some Apple web sites might inquire y'all to update your account.

What to remember when you apply two-factor hallmark

Two-cistron authentication significantly improves the security of your Apple ID. Later on you turn it on, signing into your account will require both your password and admission to your trusted devices or trusted phone number. To keep your account equally secure as possible and aid ensure you never lose access, there are a few simple guidelines yous should follow:

  • Remember your Apple tree ID password.
  • Use a device passcode on all your devices.
  • Keep your trusted telephone number(s) upwards to appointment.
  • Go along your trusted devices physically secure.

Manage your account

You can manage your trusted phone numbers, trusted devices, and other account information from your Apple ID account page.

Manage your trusted phone numbers

To use 2-gene authentication, you demand at least one trusted phone number on file where you tin receive verification codes. Consider verifying an additional trusted phone number other than your own phone number. If your iPhone is your merely trusted device and information technology is missing or damaged, you will be unable to receive verification codes required to access your business relationship.

Update your trusted phone number on your Apple ID account folio

  1. Go to appleid.apple.com.
  2. Sign in with your Apple ID.
  3. Get to the Security section and click Edit.

If you want to add a telephone number, click Add a Trusted Phone Number and enter the phone number. Cull to verify the number with a text message or automated phone call, and click Go along. To remove a trusted phone number, clickx icon adjacent to the telephone number you want to remove.

View and manage your trusted devices

Yous can view and manage a list of your trusted devices on iOS, macOS, and in the Devices section of your Apple ID account page.

On iOS:

  1. Go to Settings > [your proper name].
  2. Select a device from the list.

On macOS Catalina or later:

  1. Choose Apple menu  > Organization Preferences.
  2. Select Apple ID.
  3. Select a device from the sidebar.

On macOS Mojave or earlier:

  1. Choose Apple menu  > System Preferences.
  2. Select iCloud, then click Account Details.
  3. Click the Devices tab.
  4. Select a device from the list.

On the web:

  1. Go to your Apple ID account page.
  2. Sign in with your Apple ID.
  3. Become to the Devices department.

The device list shows the devices that you're currently signed in to with your Apple ID. Select a device to view device info similar the model and serial number. Below that you can run into other useful information, including whether or non the device is trusted and tin can exist used to receive Apple ID verification codes.

Yous can also remove a trusted device by selecting Remove from Account from the device list. Removing a trusted device will ensure that it can no longer display verification codes and that admission to iCloud, and other Apple services on the device, is blocked until you sign in again with ii-gene authentication. If you need to detect or erase your device before you remove it from your trusted device listing, you can employ Find My iPhone.

Generate app-specific passwords

With two-cistron authentication, you need an app-specific countersign to sign in to your account using 3rd-party apps or services such every bit email, contacts, or calendar apps not provided by Apple. Follow these steps to generate an app-specific password:

  1. Sign in to your Apple ID account page.
  2. Click Generate Password beneath App-Specific Passwords.
  3. Follow the steps on your screen.

After you generate your app-specific password, enter or paste it into the countersign field of the app as you would unremarkably.

Frequently asked questions

Demand help? You lot might find the answer to your question below.

What if I forget my password?

You tin can reset or change your password from your trusted device or browser when y'all follow these steps.

On your iPhone, iPad, or iPod touch

  1. Get to Settings > [your proper name].
  2. Tap Countersign & Security > Modify Password.
  3. Enter a new password.

On your Mac

  1. Choose Apple carte  > System Preferences, then click Apple ID.
  2. Click Countersign & Security, then click Change Password.

If you lot're using macOS Mojave or earlier:

  1. Cull Apple carte du jour  > System Preferences, and so click iCloud.
  2. Cull Account Details. If you're asked to enter your Apple ID password, click Forgot Apple tree ID or countersign and follow the onscreen instructions. You can skip the steps beneath.
  3. Click Security > Reset Password. Before you tin reset your Apple ID password, enter the password used to unlock your Mac.

On the web

If you don't have access to an iPhone, iPad, iPod bear on, or Mac, y'all can reset or change your password from iforgot.apple.com.

What if I tin can't admission a trusted device or didn't receive a verification code?

If you're signing in and don't accept a trusted device handy that can display verification codes, yous can have a code sent to your trusted phone number via text message or an automated phone telephone call instead. Click Didn't Get a Code on the sign in screen and choose to send a code to your trusted telephone number. You tin also get a code direct from Settings on a trusted device. Larn how to get a verification code.

If y'all use iOS 11.three or later on your iPhone, you lot might not need to enter a verification code. In some cases, your trusted telephone number can be automatically verified in the background on your iPhone. It's one less thing to do, and your account is still protected with two-factor authentication.

If I tin can't sign in, how do I regain access to my account?

If yous can't sign in, access a trusted device, reset your password, or receive verification codes, you tin asking account recovery to regain access to your business relationship. Account recovery is an automated process designed to go yous dorsum in to your account as speedily equally possible while denying access to anyone who might be pretending to be you. It might take a few days—or longer—depending on what specific account information you can provide to verify your identity.

If you lot generated a recovery key, you tin can employ your recovery primal to regain access to your account instead. Learn more about using a recovery key.

Practice I nevertheless demand to remember whatsoever security questions?

No. With ii-factor authentication, you don't need to call up any security questions. We verify your identity exclusively using your password and verification codes sent to your trusted devices and phone numbers. When you enroll in ii-gene authentication, nosotros continue your old security questions on file for 2 weeks in case yous need to render your account to its previous security settings. Later that, they're deleted.

Can Apple Support help me regain admission to my account?

Apple Support can answer your questions about the business relationship recovery procedure, but can't verify your identity or expedite the process in whatever way.

What are the arrangement requirements for two-factor authentication?

For the best experience, make sure that you lot meet these organization requirements on all of the devices yous employ with your Apple ID:

  • iPhone, iPad, or iPod affect with iOS ix and later
  • Mac with Bone 10 El Capitan and iTunes 12.3 and afterwards
  • Apple tree Watch with watchOS 2 and later
  • Apple Tv set Hard disk drive with tvOS
  • Windows PC with iCloud for Windows five and iTunes 12.3.3 and later

Tin Apple IDs created for children apply ii-factor authentication?

Yes. Any Apple ID that meets the bones system requirements can enroll in two-cistron authentication. Acquire more than about who can use two-factor hallmark.

What if I don't recognize the location shown in my sign in notification?

When you sign in on a new device, you'll get a notification on your other trusted devices that includes a map showing the guess location of the new device. This is an estimate location based on the IP accost the device is currently using, rather than the exact location of the device. The location shown might reflect the network you're connected to, and not your physical location.

If you know you're the person trying to sign in only y'all don't recognize the location shown, you can still tap Allow and continue signing in. However, if you ever see a notification that your Apple tree ID is existence used to sign in on a new device and yous're non the one signing in, tap Don't Allow to block the sign in try.

What if I utilise 2-factor authentication on a device running older software?

If you use two-gene hallmark with devices running older Os versions—similar an Apple TV (2nd or 3rd generation)—yous might be asked to add your six-digit verification lawmaking to the terminate of your password when signing in. Get your verification code from a trusted device running iOS 9 and afterwards or OS X El Capitan and later, or accept information technology sent to your trusted telephone number. Then blazon your password followed by the six-digit verification code direct into the password field.

Can I turn off two-gene authentication after I've turned information technology on?

If you already employ two-cistron authentication, y'all can no longer turn it off. Certain features in the latest versions of iOS and macOS require this extra level of security, which is designed to protect your data. If you recently updated your account, you can unenroll within two weeks of enrollment. Just open up your enrollment confirmation email and click the link to return to your previous security settings. Keep in heed, this makes your account less secure and means that you can't use features that require higher security.

Is this different than Apple tree'due south older ii-step verification characteristic?

Yes. Two-factor authentication is congenital directly into iOS, macOS, tvOS, watchOS, and Apple'due south web sites. It uses different methods to trust devices and deliver verification codes, and offers a more streamlined user experience. You need two-gene authentication to use certain features that require improved security.

If you already apply two-pace verification and desire to update to two-factor hallmark, acquire how to switch to two-factor hallmark. If your account isn't eligible for two-factor authentication, you can still utilise two-pace verification to protect your information.

Information about products not manufactured by Apple, or independent websites non controlled or tested by Apple tree, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the pick, operation, or use of 3rd-party websites or products. Apple tree makes no representations regarding 3rd-political party website accuracy or reliability. Contact the vendor for additional information.

Published Date: