{"id":36838,"date":"2016-06-22T13:38:51","date_gmt":"2016-06-22T18:38:51","guid":{"rendered":"https:\/\/eshop.macsales.com\/blog\/?p=36838"},"modified":"2016-06-30T11:13:08","modified_gmt":"2016-06-30T16:13:08","slug":"rocket-yard-guide-two-factor-authentication-for-apple-id","status":"publish","type":"post","link":"https:\/\/eshop.macsales.com\/blog\/36838-rocket-yard-guide-two-factor-authentication-for-apple-id\/","title":{"rendered":"Rocket Yard Guide: How Two-Factor Authentication for Apple ID Works"},"content":{"rendered":"

\"TwoFactorAuthentication\"<\/p>\n

There are certain actions that anyone can take to make their Apple products more secure, but none is probably as effective as enabling two-factor authentication for your Apple ID<\/strong>. Let’s face it, your Apple ID is used to purchase products (apps, music, movies, even hardware if you’re purchasing it from the online Apple Store) and sign you into iCloud where a lot of personal information is stored. So shouldn’t you go out of your way to make sure that you are the only person who can access that account — even if someone else knows your password?<\/p>\n

Let’s start by talking about the definition of two-factor authentication. Wikipedia<\/a> describes it as “a method of confirming a user’s claimed identity by utilizing a combination of two different components. These components may be something that the user knows, something that the user possesses or something that is inseparable from the user.” As an example, when you want to withdraw money from an ATM, you use two-factor authentication. You need to have a combination of your bank card and a PIN for the transaction to proceed. In other words, you use something you know<\/i> (your PIN) and something you have<\/i> (your bank card) to prove you are who you say you are.<\/p>\n

\"twofactor\"ATMs aren’t the best example of two-factor authentication, of course, since criminal elements have discovered ways of modifying ATMs to skim card numbers and copy PINs. Two-factor authentication for Apple ID makes it possible to only access your account on trusted devices like an iPhone, iPad or Mac. What happens is that when you try to sign into a new device for the first time, you’re asked to provide two pieces of information — your Apple ID password and a six-digit verification code that’s displayed automatically on other trusted devices.\u00a0That verification code is a temporary code that’s sent to your trusted device or a trusted phone number (more about that later…) whenever you sign into a new device or browser with your Apple ID.<\/p>\n

Let’s look at an example. You already own an iPhone and you like it so much that you’ve given up that old PC for a shiny new MacBook. If two-factor authentication is enabled, the first time you sign into Apple services like iCloud using your Apple ID on that MacBook, a prompt appears asking you to enter your Apple ID password and a verification code. That verification code appears automatically on your iPhone. Take the six-digit code and type it into the MacBook along with your password, and you’ve just used two-factor authentication. Since you have now had to use more than just a password to access your account, security is improved for that Apple ID and all information associated with it.<\/p>\n

You won’t have to enter a verification code on that MacBook again unless you sign completely out of the device, erase it, or have to change your Apple ID password. If you sign into iCloud from a web browser on your Mac or PC, you can choose to trust your browser so that you won’t be asked to enter a verification code whenever you sign in from that particular computer.<\/p>\n

What are some of the trusted devices that can be used to receive a two-factor authentication verification code? Any iPhone, iPad, iPod touch or Mac using iOS 9 or OS X El Capitan that has already been signed into using two-factor authentication. Apple knows that those devices are yours and they can be used to verify your identity with a verification code if you try to sign in on a different device or a different browser.<\/p>\n

What happens if you don’t have a trusted device? For example, you may have just purchased your first iPhone and you’re new to the Apple ecosystem. Well, you’ll be asked to provide a trusted phone number that can be used to receive verification codes by text message or a “robo-call”. To enroll in two-factor authentication, you must verify at least one trusted phone number. This can be a home phone or a phone number used by another family member or close friends. This is useful if you can’t access your own devices for some reason.<\/p>\n

There’s one other way to get a verification code. If you’re using that device and can’t received a verification code on other devices, you can get one from Settings — even if your device is offline. In iOS 9, launch Settings and then select iCloud. Tap your Apple ID username, and you’ll be asked to enter your Apple ID password. If your device is offline, tap Get Verification Code. If it’s online, tap Password & Security > Get Verification Code.<\/p>\n

For a Mac running OS X El Capitan, launch System Preferences (from the Dock or Apple Menu), click iCloud, then click Account Details. If your Mac is offline, click the Get Verification Code button. If it’s online, click Password & Security and then Get Verification Code.<\/p>\n

Turning On Two-Factor Authentication<\/strong>
\nNow that you know all of the details on what two-factor authentication offers and how it is used with your Apple ID, it’s time to learn how to turn it on. It’s available for all iCloud users who have at least one device using either iOS 9 or OS X El Capitan (or of course, iOS 10 and macOS Sierra).<\/p>\n

On the iPhone, iPad or iPod touch using iOS 9 or later:<\/p>\n