Two-cistron hallmark for Apple ID

Ii-gene authentication is an extra layer of security for your Apple tree ID designed to ensure that you lot're the simply person who can admission your account, even if someone knows your password.

How it works

With two-factor authentication, only you tin access your account on a trusted device or the web. When you want to sign in to a new device for the get-go fourth dimension, y'all'll need to provide two pieces of information—your countersign and the 6-digit verification code that's automatically displayed on your trusted devices or sent to your phone number. By entering the code, you're verifying that you trust the new device. For example, if you have an iPhone and are signing into your business relationship for the commencement time on a newly purchased Mac, you'll be prompted to enter your countersign and the verification code that's automatically displayed on your iPhone.

Because your password alone is no longer enough to access your account, two-factor authentication dramatically improves the security of your Apple ID and all the personal data you store with Apple.

Once signed in, you won't be asked for a verification code on that device once again unless you sign out completely, erase the device, or need to change your countersign for security reasons. When yous sign in on the web, you tin choose to trust your browser, so yous won't be asked for a verification code the next fourth dimension yous sign in from that computer.

Trusted devices

A trusted device is an iPhone, iPad, or iPod touch with iOS 9 or later, or Mac with Bone 10 El Capitan or subsequently that you've already signed in to using 2-gene authentication. It's a device we know is yours and that can be used to verify your identity by displaying a verification code from Apple tree when you sign in on a different device or browser. An Apple tree Watch with watchOS half-dozen or later can receive verification codes when yous sign in with your Apple ID, just cannot act every bit a trusted device for password resets.

Trusted phone numbers

A trusted telephone number is a number that can be used to receive verification codes by text message or automatic phone phone call. You lot must verify at to the lowest degree one trusted phone number to enroll in two-factor authentication.

You should also consider verifying an additional phone number you can access, such as a habitation phone, or a number used past a family unit member or close friend. You can use this number if you temporarily tin't access your principal number or your own devices.

Verification codes

Set up two-cistron hallmark for your Apple ID

Turn on two-factor authentication on your iPhone, iPad, or iPod bear upon

  1. Go to Settings > [your proper noun] > Password & Security.
  2. Tap Turn On Two-Cistron Hallmark.
  3. Tap Go on.
  4. Enter the phone number where you want to receive verification codes when you sign in. Yous can choose to receive the codes by text message or automated phone call.
  5. Tap Adjacent.
  6. Enter the verification code to verify your telephone number and plow on two-factor authentication.

You lot might be asked to answer your Apple tree ID security questions.

Plough on 2-factor authentication on your Mac

  1. Cull Apple tree menu  > System Preferences, then click Apple ID.
  2. Click Countersign & Security under your name.
  3. Next to 2-Factor Authentication, click Turn On.

If you're using macOS Mojave or earlier:

  1. Choose Apple tree menu  > System Preferences, so click iCloud, and select Account Details.
  2. Click Security.
  3. Click Turn On Two-Cistron Authentication.

Some Apple IDs created in iOS 10.iii or macOS 10.12.four and later are protected with 2-factor authentication by default. In this example, you see that two-factor hallmark is already turned on.

Upgrade to ii-factor hallmark on the spider web

  1. Go to appleid.apple.com, and so sign in with your Apple tree ID.
  2. Respond your security questions, then tap Keep.
  3. You lot'll see a prompt to upgrade your account security. Tap Go on.
  4. Click Upgrade Account Security.
  5. Enter the phone number where you want to receive verification codes when y'all sign in. You tin can choose to receive the codes by text message or automated telephone call.
  6. Click Go on.
  7. Enter the verification code to verify your phone number and plough on two-factor authentication.

If you take an Apple tree ID that'due south not protected past two-factor hallmark, some Apple tree web sites might ask y'all to update your account.

What to remember when y'all use two-cistron hallmark

Two-gene authentication significantly improves the security of your Apple ID. Later yous turn it on, signing into your account will crave both your password and access to your trusted devices or trusted phone number. To keep your account as secure as possible and aid ensure you lot never lose admission, there are a few simple guidelines you should follow:

  • Remember your Apple ID password.
  • Use a device passcode on all your devices.
  • Proceed your trusted phone number(south) upwardly to date.
  • Go on your trusted devices physically secure.

Manage your business relationship

Y'all can manage your trusted telephone numbers, trusted devices, and other account information from your Apple tree ID account page.

Manage your trusted telephone numbers

To use two-factor authentication, you need at least one trusted telephone number on file where you tin can receive verification codes. Consider verifying an boosted trusted telephone number other than your ain phone number. If your iPhone is your simply trusted device and information technology is missing or damaged, you volition be unable to receive verification codes required to access your account.

Update your trusted phone number on your Apple ID account page

  1. Become to appleid.apple.com.
  2. Sign in with your Apple tree ID.
  3. Go to the Security section and click Edit.

If you lot want to add together a phone number, click Add a Trusted Telephone Number and enter the phone number. Choose to verify the number with a text message or automated phone call, and click Continue. To remove a trusted phone number, clickx icon next to the phone number you want to remove.

View and manage your trusted devices

You lot can view and manage a listing of your trusted devices on iOS, macOS, and in the Devices section of your Apple ID account page.

On iOS:

  1. Go to Settings > [your name].
  2. Select a device from the listing.

On macOS Catalina or afterwards:

  1. Choose Apple tree menu  > Arrangement Preferences.
  2. Select Apple ID.
  3. Select a device from the sidebar.

On macOS Mojave or earlier:

  1. Choose Apple tree carte  > System Preferences.
  2. Select iCloud, then click Account Details.
  3. Click the Devices tab.
  4. Select a device from the list.

On the web:

  1. Get to your Apple ID business relationship page.
  2. Sign in with your Apple ID.
  3. Go to the Devices department.

The device listing shows the devices that you're currently signed in to with your Apple ID. Select a device to view device info like the model and serial number. Beneath that you can see other useful information, including whether or not the device is trusted and tin be used to receive Apple ID verification codes.

You can also remove a trusted device by selecting Remove from Account from the device list. Removing a trusted device will ensure that it tin no longer display verification codes and that access to iCloud, and other Apple services on the device, is blocked until you lot sign in once again with two-cistron authentication. If you need to find or erase your device earlier you remove information technology from your trusted device list, y'all can use Detect My iPhone.

Generate app-specific passwords

With ii-gene authentication, you need an app-specific password to sign in to your account using third-political party apps or services such as email, contacts, or agenda apps not provided by Apple tree. Follow these steps to generate an app-specific password:

  1. Sign in to your Apple ID account page.
  2. Click Generate Countersign below App-Specific Passwords.
  3. Follow the steps on your screen.

Afterwards you generate your app-specific password, enter or paste information technology into the password field of the app every bit you would normally.

Frequently asked questions

Need help? You lot might find the answer to your question below.

What if I forget my countersign?

Y'all can reset or change your countersign from your trusted device or browser when you lot follow these steps.

On your iPhone, iPad, or iPod bear upon

  1. Go to Settings > [your name].
  2. Tap Password & Security > Change Password.
  3. Enter a new password.

On your Mac

  1. Choose Apple menu  > System Preferences, so click Apple ID.
  2. Click Countersign & Security, then click Change Password.

If yous're using macOS Mojave or earlier:

  1. Choose Apple menu  > System Preferences, then click iCloud.
  2. Choose Business relationship Details. If you're asked to enter your Apple ID password, click Forgot Apple ID or password and follow the onscreen instructions. Y'all can skip the steps below.
  3. Click Security > Reset Password. Earlier you tin reset your Apple ID countersign, enter the countersign used to unlock your Mac.

On the web

If yous don't accept access to an iPhone, iPad, iPod touch on, or Mac, you can reset or change your password from iforgot.apple tree.com.

What if I can't access a trusted device or didn't receive a verification lawmaking?

If you're signing in and don't accept a trusted device handy that tin can display verification codes, you can accept a lawmaking sent to your trusted phone number via text message or an automated telephone phone call instead. Click Didn't Go a Code on the sign in screen and choose to ship a lawmaking to your trusted phone number. Y'all can also get a code directly from Settings on a trusted device. Learn how to get a verification code.

If you use iOS 11.three or after your iPhone, you might not need to enter a verification lawmaking. In some cases, your trusted telephone number can exist automatically verified in the background on your iPhone. Information technology'south one less thing to practise, and your account is still protected with ii-factor authentication.

If I can't sign in, how practise I regain admission to my account?

If you tin can't sign in, admission a trusted device, reset your password, or receive verification codes, you lot can request account recovery to regain access to your account. Business relationship recovery is an automated process designed to go y'all back in to your account as quickly as possible while denying admission to anyone who might be pretending to exist y'all. It might have a few days—or longer—depending on what specific account information you can provide to verify your identity.

If you generated a recovery central, you tin use your recovery primal to regain access to your account instead. Learn more about using a recovery key.

Practise I still demand to call back whatsoever security questions?

No. With two-gene authentication, you don't need to remember any security questions. We verify your identity exclusively using your password and verification codes sent to your trusted devices and telephone numbers. When yous enroll in two-factor authentication, we keep your old security questions on file for 2 weeks in case you need to return your account to its previous security settings. Later that, they're deleted.

Can Apple Support assist me regain access to my business relationship?

Apple Support can respond your questions about the account recovery procedure, but tin can't verify your identity or expedite the procedure in whatsoever fashion.

What are the organisation requirements for two-factor authentication?

For the all-time feel, brand certain that yous meet these arrangement requirements on all of the devices you utilize with your Apple ID:

  • iPhone, iPad, or iPod affect with iOS 9 and later
  • Mac with Os 10 El Capitan and iTunes 12.iii and afterward
  • Apple Sentinel with watchOS 2 and later
  • Apple TV HD with tvOS
  • Windows PC with iCloud for Windows 5 and iTunes 12.iii.three and afterwards

Can Apple IDs created for children use two-cistron authentication?

Yes. Any Apple ID that meets the basic system requirements tin can enroll in 2-factor authentication. Learn more nigh who tin can utilise two-cistron authentication.

What if I don't recognize the location shown in my sign in notification?

When you sign in on a new device, you lot'll get a notification on your other trusted devices that includes a map showing the estimate location of the new device. This is an approximate location based on the IP address the device is currently using, rather than the exact location of the device. The location shown might reflect the network you're connected to, and not your physical location.

If you know you lot're the person trying to sign in but you don't recognize the location shown, you can still tap Allow and continue signing in. However, if y'all ever encounter a notification that your Apple ID is being used to sign in on a new device and you're not the i signing in, tap Don't Allow to block the sign in attempt.

What if I use two-factor authentication on a device running older software?

If you use 2-factor authentication with devices running older Bone versions—like an Apple tree Tv set (2nd or 3rd generation)—y'all might be asked to add your six-digit verification code to the end of your countersign when signing in. Become your verification lawmaking from a trusted device running iOS ix and later or Bone 10 El Capitan and later, or take it sent to your trusted phone number. Then type your password followed past the six-digit verification code directly into the password field.

Can I turn off ii-gene authentication after I've turned it on?

If y'all already employ two-factor hallmark, you can no longer turn it off. Certain features in the latest versions of iOS and macOS require this extra level of security, which is designed to protect your information. If you recently updated your account, you can unenroll within 2 weeks of enrollment. But open your enrollment confirmation email and click the link to return to your previous security settings. Proceed in mind, this makes your account less secure and means that you can't utilize features that require higher security.

Is this different than Apple's older two-step verification feature?

Yes. Two-gene authentication is congenital directly into iOS, macOS, tvOS, watchOS, and Apple's spider web sites. It uses unlike methods to trust devices and evangelize verification codes, and offers a more streamlined user experience. Yous need two-factor authentication to apply certain features that require improved security.

If you already apply 2-stride verification and want to update to two-factor authentication, learn how to switch to two-gene authentication. If your account isn't eligible for two-factor hallmark, y'all tin still use ii-step verification to protect your information.

Information most products not manufactured by Apple, or contained websites non controlled or tested past Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or employ of tertiary-party websites or products. Apple makes no representations regarding 3rd-party website accuracy or reliability. Contact the vendor for boosted information.

Published Date: