Two-factor hallmark for Apple ID

2-factor authentication is an extra layer of security for your Apple ID designed to ensure that you lot're the just person who can access your business relationship, even if someone knows your countersign.

How it works

With two-gene hallmark, only you lot tin can access your account on a trusted device or the web. When you desire to sign in to a new device for the first time, you'll need to provide two pieces of information—your countersign and the six-digit verification code that's automatically displayed on your trusted devices or sent to your telephone number. By entering the code, you're verifying that yous trust the new device. For instance, if you accept an iPhone and are signing into your business relationship for the get-go fourth dimension on a newly purchased Mac, you'll be prompted to enter your password and the verification lawmaking that'south automatically displayed on your iPhone.

Because your countersign alone is no longer enough to access your account, two-cistron authentication dramatically improves the security of your Apple ID and all the personal information you lot store with Apple.

Once signed in, you won't be asked for a verification code on that device again unless you sign out completely, erase the device, or demand to modify your password for security reasons. When you sign in on the spider web, you can choose to trust your browser, then you won't be asked for a verification code the next fourth dimension you sign in from that reckoner.

Trusted devices

A trusted device is an iPhone, iPad, or iPod touch on with iOS ix or later on, or Mac with OS X El Capitan or later that you lot've already signed in to using ii-gene authentication. Information technology's a device nosotros know is yours and that can be used to verify your identity by displaying a verification code from Apple when you lot sign in on a dissimilar device or browser. An Apple tree Lookout man with watchOS 6 or later can receive verification codes when you sign in with your Apple ID, but cannot human action as a trusted device for password resets.

Trusted phone numbers

A trusted phone number is a number that tin can be used to receive verification codes past text message or automated call. Y'all must verify at least one trusted telephone number to enroll in 2-factor authentication.

You should also consider verifying an additional telephone number you tin access, such equally a dwelling house phone, or a number used past a family member or close friend. You lot can use this number if you temporarily tin can't access your main number or your own devices.

Verification codes

Prepare 2-factor authentication for your Apple ID

Plough on two-cistron authentication on your iPhone, iPad, or iPod touch

  1. Go to Settings > [your proper noun] > Password & Security.
  2. Tap Turn On Two-Factor Authentication.
  3. Tap Proceed.
  4. Enter the phone number where you desire to receive verification codes when you sign in. Yous can choose to receive the codes by text message or automated phone call.
  5. Tap Adjacent.
  6. Enter the verification code to verify your phone number and turn on 2-factor authentication.

You might exist asked to answer your Apple ID security questions.

Turn on two-factor hallmark on your Mac

  1. Choose Apple menu  > Arrangement Preferences, then click Apple ID.
  2. Click Countersign & Security under your proper name.
  3. Adjacent to Two-Gene Hallmark, click Turn On.

If yous're using macOS Mojave or earlier:

  1. Choose Apple menu  > Arrangement Preferences, then click iCloud, and select Account Details.
  2. Click Security.
  3. Click Plow On Two-Gene Hallmark.

Some Apple tree IDs created in iOS x.three or macOS x.12.four and after are protected with two-factor authentication by default. In this example, you run into that two-cistron authentication is already turned on.

Upgrade to two-factor authentication on the spider web

  1. Go to appleid.apple.com, then sign in with your Apple ID.
  2. Reply your security questions, then tap Continue.
  3. You'll see a prompt to upgrade your business relationship security. Tap Continue.
  4. Click Upgrade Account Security.
  5. Enter the phone number where you want to receive verification codes when yous sign in. You can choose to receive the codes by text message or automated telephone call.
  6. Click Keep.
  7. Enter the verification lawmaking to verify your telephone number and turn on two-gene authentication.

If you lot have an Apple ID that's not protected by ii-factor authentication, some Apple spider web sites might ask you lot to update your account.

What to call up when you use two-factor authentication

Two-factor authentication significantly improves the security of your Apple tree ID. After you turn it on, signing into your account volition crave both your password and admission to your trusted devices or trusted phone number. To continue your account as secure as possible and help ensure you lot never lose admission, there are a few uncomplicated guidelines you lot should follow:

  • Remember your Apple ID password.
  • Use a device passcode on all your devices.
  • Go along your trusted telephone number(s) up to appointment.
  • Continue your trusted devices physically secure.

Manage your account

Y'all can manage your trusted telephone numbers, trusted devices, and other account information from your Apple ID account page.

Manage your trusted telephone numbers

To utilize two-gene authentication, you lot need at least one trusted phone number on file where you can receive verification codes. Consider verifying an boosted trusted phone number other than your ain phone number. If your iPhone is your simply trusted device and it is missing or damaged, you volition be unable to receive verification codes required to access your account.

Update your trusted phone number on your Apple ID account page

  1. Go to appleid.apple.com.
  2. Sign in with your Apple ID.
  3. Go to the Security section and click Edit.

If you lot want to add together a phone number, click Add a Trusted Phone Number and enter the phone number. Choose to verify the number with a text message or automated telephone call, and click Keep. To remove a trusted phone number, clickx icon adjacent to the telephone number y'all want to remove.

View and manage your trusted devices

You can view and manage a list of your trusted devices on iOS, macOS, and in the Devices section of your Apple ID account page.

On iOS:

  1. Go to Settings > [your name].
  2. Select a device from the list.

On macOS Catalina or later:

  1. Cull Apple menu  > System Preferences.
  2. Select Apple ID.
  3. Select a device from the sidebar.

On macOS Mojave or earlier:

  1. Choose Apple menu  > Organization Preferences.
  2. Select iCloud, so click Account Details.
  3. Click the Devices tab.
  4. Select a device from the list.

On the spider web:

  1. Get to your Apple tree ID account folio.
  2. Sign in with your Apple ID.
  3. Go to the Devices section.

The device listing shows the devices that you're currently signed in to with your Apple ID. Select a device to view device info like the model and serial number. Beneath that yous tin run into other useful information, including whether or not the device is trusted and can be used to receive Apple ID verification codes.

Yous can as well remove a trusted device past selecting Remove from Account from the device list. Removing a trusted device will ensure that it can no longer display verification codes and that access to iCloud, and other Apple tree services on the device, is blocked until you sign in again with ii-cistron hallmark. If yous need to find or erase your device before you remove it from your trusted device list, yous can use Detect My iPhone.

Generate app-specific passwords

With ii-factor authentication, you demand an app-specific password to sign in to your account using third-party apps or services such as e-mail, contacts, or calendar apps non provided past Apple. Follow these steps to generate an app-specific password:

  1. Sign in to your Apple ID business relationship page.
  2. Click Generate Password below App-Specific Passwords.
  3. Follow the steps on your screen.

After yous generate your app-specific countersign, enter or paste information technology into the password field of the app equally you would usually.

Frequently asked questions

Need help? You might observe the answer to your question below.

What if I forget my countersign?

You can reset or change your password from your trusted device or browser when you lot follow these steps.

On your iPhone, iPad, or iPod touch on

  1. Become to Settings > [your name].
  2. Tap Password & Security > Change Password.
  3. Enter a new password.

On your Mac

  1. Choose Apple menu  > System Preferences, then click Apple tree ID.
  2. Click Password & Security, then click Change Password.

If yous're using macOS Mojave or earlier:

  1. Choose Apple card  > System Preferences, then click iCloud.
  2. Choose Account Details. If you're asked to enter your Apple ID password, click Forgot Apple ID or password and follow the onscreen instructions. Yous tin can skip the steps below.
  3. Click Security > Reset Password. Earlier you can reset your Apple ID countersign, enter the password used to unlock your Mac.

On the web

If yous don't have access to an iPhone, iPad, iPod touch, or Mac, y'all can reset or modify your countersign from iforgot.apple.com.

What if I can't access a trusted device or didn't receive a verification code?

If you're signing in and don't have a trusted device handy that can display verification codes, you can have a code sent to your trusted phone number via text message or an automated phone call instead. Click Didn't Go a Code on the sign in screen and choose to send a lawmaking to your trusted phone number. Y'all can also get a code straight from Settings on a trusted device. Learn how to get a verification code.

If yous use iOS 11.iii or subsequently on your iPhone, you might not need to enter a verification code. In some cases, your trusted telephone number tin be automatically verified in the groundwork on your iPhone. It's ane less thing to do, and your business relationship is still protected with two-factor hallmark.

If I can't sign in, how exercise I regain access to my business relationship?

If you tin't sign in, admission a trusted device, reset your password, or receive verification codes, y'all can request account recovery to regain admission to your account. Business relationship recovery is an automatic process designed to get you back in to your business relationship as speedily as possible while denying access to anyone who might be pretending to be you lot. It might take a few days—or longer—depending on what specific account information y'all can provide to verify your identity.

If y'all generated a recovery cardinal, you tin can employ your recovery key to regain access to your business relationship instead. Learn more about using a recovery key.

Exercise I still demand to remember whatsoever security questions?

No. With two-factor authentication, you don't need to remember any security questions. We verify your identity exclusively using your password and verification codes sent to your trusted devices and phone numbers. When you enroll in two-factor authentication, nosotros continue your onetime security questions on file for two weeks in case you demand to return your account to its previous security settings. After that, they're deleted.

Can Apple Support help me regain access to my account?

Apple Support can respond your questions about the account recovery process, simply tin can't verify your identity or expedite the procedure in any fashion.

What are the system requirements for two-gene authentication?

For the best experience, brand sure that yous meet these system requirements on all of the devices y'all employ with your Apple tree ID:

  • iPhone, iPad, or iPod touch with iOS 9 and afterwards
  • Mac with OS X El Capitan and iTunes 12.3 and later
  • Apple Watch with watchOS 2 and later on
  • Apple TV HD with tvOS
  • Windows PC with iCloud for Windows 5 and iTunes 12.three.3 and later

Can Apple IDs created for children apply ii-factor hallmark?

Yes. Any Apple ID that meets the basic system requirements tin can enroll in two-factor authentication. Learn more well-nigh who can use ii-factor hallmark.

What if I don't recognize the location shown in my sign in notification?

When you sign in on a new device, you'll become a notification on your other trusted devices that includes a map showing the guess location of the new device. This is an estimate location based on the IP address the device is currently using, rather than the exact location of the device. The location shown might reverberate the network you're connected to, and not your concrete location.

If you lot know you're the person trying to sign in but you don't recognize the location shown, you lot can all the same tap Allow and continue signing in. Even so, if y'all ever see a notification that your Apple ID is existence used to sign in on a new device and yous're not the ane signing in, tap Don't Allow to block the sign in attempt.

What if I employ 2-cistron hallmark on a device running older software?

If you use two-factor hallmark with devices running older OS versions—like an Apple Idiot box (2nd or 3rd generation)—yous might be asked to add your six-digit verification code to the stop of your password when signing in. Become your verification code from a trusted device running iOS 9 and later or OS X El Capitan and afterward, or take information technology sent to your trusted phone number. Then type your password followed past the six-digit verification code directly into the password field.

Can I plough off two-factor hallmark after I've turned information technology on?

If y'all already use ii-factor authentication, you can no longer turn it off. Certain features in the latest versions of iOS and macOS require this extra level of security, which is designed to protect your information. If y'all recently updated your account, you can unenroll within two weeks of enrollment. But open your enrollment confirmation email and click the link to return to your previous security settings. Continue in mind, this makes your account less secure and means that y'all tin can't use features that require higher security.

Is this different than Apple's older two-step verification characteristic?

Yes. Two-factor authentication is built directly into iOS, macOS, tvOS, watchOS, and Apple'southward web sites. Information technology uses unlike methods to trust devices and evangelize verification codes, and offers a more than streamlined user experience. Yous need two-factor authentication to utilise sure features that require improved security.

If yous already use 2-footstep verification and desire to update to two-cistron authentication, learn how to switch to two-cistron hallmark. If your business relationship isn't eligible for ii-factor authentication, you tin can still utilise 2-footstep verification to protect your information.

Information nearly products not manufactured by Apple, or contained websites not controlled or tested past Apple tree, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the pick, performance, or utilize of 3rd-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. Contact the vendor for additional information.

Published Engagement: