PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Apple Enables Two-Factor Authentication for iCloud, Apple IDs

 & Chloe Albanesius Executive Editor, News

Our team tests, rates, and reviews more than 1,500 products each year to help you make better buying decisions and get more from technology.

Our Expert
LOOK INSIDE PC LABS HOW WE TEST
65 EXPERTS
43 YEARS
41,500+ REVIEWS

Apple this week launched two-factor authentication for iCloud and Apple IDs.

The optional feature will require users to verify their identities beyond providing their passwords when: signing in to an Apple ID to manage an account; buying something on iTunes, the App Store, or iBooks; or getting Apple ID-related support from Apple.

"Turning on two-step verification reduces the possibility of someone accessing or making unauthorized changes to your account information at My Apple ID or making purchases using your account," Apple said on its support website.

If you sign up for two-factor authentication, Apple will send a four-digit code to a trusted device capable of receiving such messages (like your iPhone) every time you try to sign in to your iCloud or Apple ID account, which you will have to enter as well as your standard password.

Apple Two-Factor

"After you sign in, you can manage your account or make purchases as usual," Apple said. "Without both your password and the verification code, access to your account will be denied."

Apple will also provide users with a 14-digit Recovery Key, which you can use in the event that you lose or misplace the device to which your 4-digit code is normally sent, or your forget your password.

It's up to you, however, to remember your password, and keep your device and recovery key in a safe place. "If you lose access to two of these three items at the same time, you could be locked out of your Apple ID account permanently," Apple warned.

Apple said it won't allow two-factor authentication to be set up on an account that has recently undergone any major updates - like a password reset or change in security questions. If this is the case, Apple will implement a waiting period before two-factor authentication can be enabled, which it will alert you to via email.

"This waiting period helps Apple ensure that you are the only person accessing or modifying your account," Apple said. "While you are in this waiting period, you can continue using your account as usual with all Apple services and stores."

Initially, two-factor authentication will be available for Apple customers in the U.S., U.K., Australia, Ireland, and New Zealand. Additional countries will be added over time.

A number of companies have enabled two-factor authentication in recent months in an effort to strengthen security. Apple's change comes several months after journalist Mat Honan had all of his data wiped thanks to a hacker who took advantage of various linked accounts.

"Getting into Amazon let my hackers get into my Apple ID account, which helped them get into Gmail, which gave them access to Twitter," he wrote in August.

Honan acknowledged that had he turned on Google's two-factor authentication, none of this probably would've happened. The Honan hack prompted Amazon to stop letting Amazon customers change account settings like email and credit card data over the phone.

For more, check out PCMag's What You Need to Know About Two-Factor Authentication.

About Our Expert

Chloe Albanesius

Chloe Albanesius

Executive Editor, News

My Experience

I started out covering tech policy in DC for The National Journal, where my beat included state-level tech news and all the congressional hearings and FCC meetings I could handle. I later covered Wall Street trading tech before switching gears to consumer tech. I now lead PCMag's news coverage.

My Areas of Expertise

Getting my start in DC means I still have a soft spot for tech policy; Congressional hearings can sometimes be as entertaining as a Bravo reality show, for better or worse. But PCMag is all about the technology we use every day, as well as keeping an eye out for the trends that will shape the industry in the years ahead (or flop on arrival). I've covered the rise of social media, the iOS vs. Android wars, the cord-cutting revolution that's now left us with hefty streaming bills, and the effort to stuff artificial intelligence into every product you could imagine. This job has taken me to CES in Vegas (one too many times), IFA in Berlin, and MWC in Barcelona. I also drove a Tesla 1,000 miles out west as part of our Best Mobile Networks project. Of late, my focus is on our hard-working team of reporters at PCMag, guiding and editing their robust coverage.

Read full bio