Register FAQ / Rules Forum Spy Search Today's Posts Mark Forums Read
Go Back   MacRumors Forums > News and Article Discussion > MacRumors.com News Discussion

Reply
 
Thread Tools Search this Thread Display Modes
Old Jun 30, 2014, 04:28 PM   #1
MacRumors
macrumors bot
 
Join Date: Apr 2001
Apple Expanding Two-Step Verification to iCloud.com




Apple appears to be testing its two-factor authentication system on some iCloud.com accounts, asking for a verification code before allowing users with two-factor verification enabled to access various iCloud.com apps.

First noticed by AppleInsider, the two-factor verification system for iCloud.com requires users to enter a verification code sent via SMS or to a trusted iOS device before the iCloud.com versions of Mail, Contacts, Calendar, Reminders, Pages, Numbers, and Keynote can be used.

Previously, accessing these apps only required an Apple ID password, but now "Find My iPhone" is the only app that remains accessible without a two-factor verification code. Computers used to access iCloud.com have a "Remember This Browser" option, requiring a verification code to be entered only once.

Originally implemented back in March of 2013, two-factor verification is an opt-in system designed to increase Apple ID account security by requiring identity verification before allowing users to make account changes or purchase content on new devices. It replaces standard security questions with a security code delivered to a trusted device.

At this time, it is unknown if Apple is simply testing the feature with some users or working on a wider rollout for all iCloud.com users with two-factor verification enabled.

Update 3:30 PM PT: Apple appears to have disabled two-factor verification for some iCloud.com accounts that previously had access to the feature, suggesting it may have seen an accidental early launch.

Article Link: Apple Expanding Two-Step Verification to iCloud.com
MacRumors is offline   0 Reply With Quote
Old Jun 30, 2014, 04:29 PM   #2
TouchMint.com
macrumors 65816
 
TouchMint.com's Avatar
 
Join Date: May 2012
Location: Phoenix
I can hardly remember my password let alone the secert question haha.
__________________
TouchMint.com iOS App Site
Adventure To Fate iOS RPG Game Site
Indie iOS Game: Adventure To Fate : A Quest To The Core JRPG

TouchMint.com is offline   2 Reply With Quote
Old Jun 30, 2014, 04:31 PM   #3
SMIDG3T
macrumors 6502a
 
SMIDG3T's Avatar
 
Join Date: Apr 2012
Location: England
This is good, it's needed to view/edit your Apple ID so why not to access iCloud?

Another layer of security is great.
__________________
iPhone 5s - 32GB - Gold - iOS 7.1.2

MacBook Pro - Retina display - Late 2013 Model - OS X Mavericks 10.9.4
SMIDG3T is offline   1 Reply With Quote
Old Jun 30, 2014, 04:31 PM   #4
madsci954
macrumors 68000
 
Join Date: Oct 2011
Location: Ohio
Tested on live account and it shows up for me.
madsci954 is offline   0 Reply With Quote
Old Jun 30, 2014, 04:31 PM   #5
SandboxGeneral
Moderator
 
SandboxGeneral's Avatar
 
Join Date: Sep 2010
Location: Great Lakes State
This is a step in the right direction. I've implemented the two-step on my Apple ID and think it would be welcome on iCloud as well.
__________________
••• SandboxGeneral.com •••
SandboxGeneral is online now   0 Reply With Quote
Old Jun 30, 2014, 04:31 PM   #6
borneo76
macrumors member
 
Join Date: Sep 2012
Location: Indonesia
i just frequently use Find My iPhone app only, that's all what i need . But this is good to make more secure
borneo76 is offline   0 Reply With Quote
Old Jun 30, 2014, 04:31 PM   #7
shokk
macrumors newbie
 
Join Date: Aug 2008
I can confirm this was requested on my account when I logged into iCloud. It's only a 4-digit PIN, but better than nothing.
shokk is offline   0 Reply With Quote
Old Jun 30, 2014, 04:33 PM   #8
rorschach
macrumors 68000
 
rorschach's Avatar
 
Join Date: Jul 2003
All I can say is, it's about time.
__________________
MacBook Air 13-inch (Mid 2012), iPhone 5
rorschach is offline   0 Reply With Quote
Old Jun 30, 2014, 04:33 PM   #9
OreoMuncher
macrumors newbie
 
Join Date: Nov 2013
All well and good but...

How on earth am i going to use this is school. Our school uses a cart of windows laptops and we have separate computer rooms. And obviously since I'm in school i can't use my phone... What am i going to do? Will there be an option to turn this off? I physically can't use word or powerpoint in school any more, it's too much of a headache, i really need access to iCloud. Oh god.
OreoMuncher is offline   2 Reply With Quote
Old Jun 30, 2014, 04:34 PM   #10
anyjungleinguy
macrumors member
 
Join Date: Mar 2012
Am I interpreting this correctly?

Quote:
but now "Find My iPhone" is the only app that remains accessible without a two-factor verification code.
Even with 2 factor authentication, an attacker only needs a user's password to log into iCloud.com and then precede to wipe devices from Find My iPhone?
anyjungleinguy is offline   0 Reply With Quote
Old Jun 30, 2014, 04:36 PM   #11
appleguy123
macrumors 603
 
appleguy123's Avatar
 
Join Date: Apr 2009
Location: 15 minutes in the future
I hope it's optional. I often use icloud to email things to myself to print at my college. Not interested in have to do this every time I need to print something.
__________________
[Steve Jobs was] brave enough to think differently, bold enough to believe he could change the world, and talented enough to do it. -Barack Obama
appleguy123 is offline   2 Reply With Quote
Old Jun 30, 2014, 04:36 PM   #12
Oletros
macrumors 603
 
Oletros's Avatar
 
Join Date: Jul 2009
Location: Premià de Mar
Please, Apple, use an standard system like TOTP used by almost all the other companies
__________________
There are four kinds of lies: Lies, damned lies, statistics, and analyst projections.
Oletros is offline   0 Reply With Quote
Old Jun 30, 2014, 04:48 PM   #13
Primejimbo
macrumors 68030
 
Join Date: Aug 2008
Location: Around
Quote:
Originally Posted by appleguy123 View Post
I hope it's optional. I often use icloud to email things to myself to print at my college. Not interested in have to do this every time I need to print something.
then check "remember this browser". I just tried it and it took an extra few seconds.
Primejimbo is offline   0 Reply With Quote
Old Jun 30, 2014, 04:50 PM   #14
coolfactor
macrumors 65816
 
Join Date: Jul 2002
Location: Vancouver, BC CANADA
Quote:
Originally Posted by appleguy123 View Post
I hope it's optional. I often use icloud to email things to myself to print at my college. Not interested in have to do this every time I need to print something.
Why not employ a service like Dropbox? Just as easy to log into that as to log into iCloud.
coolfactor is offline   0 Reply With Quote
Old Jun 30, 2014, 04:51 PM   #15
CrazyForApple
macrumors 6502
 
Join Date: Dec 2012
Location: Buffalo, NY
Send a message via AIM to CrazyForApple
the more secure, the better
CrazyForApple is offline   5 Reply With Quote
Old Jun 30, 2014, 04:52 PM   #16
SMIDG3T
macrumors 6502a
 
SMIDG3T's Avatar
 
Join Date: Apr 2012
Location: England
Quote:
Originally Posted by OreoMuncher View Post
How on earth am i going to use this is school. Our school uses a cart of windows laptops and we have separate computer rooms. And obviously since I'm in school i can't use my phone... What am i going to do? Will there be an option to turn this off? I physically can't use word or powerpoint in school any more, it's too much of a headache, i really need access to iCloud. Oh god.
"Computers used to access iCloud.com have a "Remember This Browser" option, requiring a verification code to be entered only once."

Surely this means you can login at home, tick the box and you won't be asked for a code again so you can continue using iCloud at school?
__________________
iPhone 5s - 32GB - Gold - iOS 7.1.2

MacBook Pro - Retina display - Late 2013 Model - OS X Mavericks 10.9.4
SMIDG3T is offline   0 Reply With Quote
Old Jun 30, 2014, 04:58 PM   #17
rdlink
macrumors 65816
 
Join Date: Nov 2007
Quote:
Originally Posted by SMIDG3T View Post
"Computers used to access iCloud.com have a "Remember This Browser" option, requiring a verification code to be entered only once."

Surely this means you can login at home, tick the box and you won't be asked for a code again so you can continue using iCloud at school?
I think the OP's point is that their school uses a series of computers on carts, and they won't necessarily have access to the same computer every time. Also, many schools like this clear browser history automatically on logout.
__________________
Desktop, Desktop, Laptop, Phone, Tablet
rdlink is offline   2 Reply With Quote
Old Jun 30, 2014, 05:01 PM   #18
appleguy123
macrumors 603
 
appleguy123's Avatar
 
Join Date: Apr 2009
Location: 15 minutes in the future
Quote:
Originally Posted by Primejimbo View Post
then check "remember this browser". I just tried it and it took an extra few seconds.
Because the college's library has several computers and it's not guaranteed that I'll get the same one every time?

Plus, I think they're restored to defaults every night.
__________________
[Steve Jobs was] brave enough to think differently, bold enough to believe he could change the world, and talented enough to do it. -Barack Obama
appleguy123 is offline   0 Reply With Quote
Old Jun 30, 2014, 05:02 PM   #19
whsbuss
macrumors 65816
 
Join Date: May 2010
Location: SE Penna.
WOW - I suggested this to Apple feedback when the phones down under got hacked last month. Its what'e required in this hacker world we live in.

Good job Apple!
whsbuss is offline   0 Reply With Quote
Old Jun 30, 2014, 05:04 PM   #20
Radio
In Time-Out
 
Join Date: Mar 2012
Location: Central California
Take my social!
Radio is offline   0 Reply With Quote
Old Jun 30, 2014, 05:12 PM   #21
bushido
macrumors 601
 
bushido's Avatar
 
Join Date: Mar 2008
Location: España y Germany
Quote:
Originally Posted by TouchMint.com View Post
I can hardly remember my password let alone the secert question haha.
lol my family will never understand this .... they already dont get those security questions. my sister for example is always like "huh??? how does it know what my favorite book is????" and my aunt is like "what is an apple id? ... after putting in her gmail account info for like 5 times and getting her apple id blocked"
__________________
¡No hables a menos que puedas mejorar el silencio!
bushido is offline   0 Reply With Quote
Old Jun 30, 2014, 05:14 PM   #22
bathurstguy
macrumors newbie
 
Join Date: Jan 2009
Quote:
Originally Posted by anyjungleinguy View Post
Am I interpreting this correctly?



Even with 2 factor authentication, an attacker only needs a user's password to log into iCloud.com and then precede to wipe devices from Find My iPhone?
It makes sense not to require second factor authentication for FMiP. If you have lost your iPhone, then how are you going to retrieve the code sent to your iPhone... You really need to think before posting!

Also, worst case if your device is erased, you simply restore from iCloud Backup and change your password. It really isn't that bad TBH.

Last edited by bathurstguy; Jun 30, 2014 at 05:31 PM.
bathurstguy is offline   1 Reply With Quote
Old Jun 30, 2014, 05:15 PM   #23
firedept
macrumors Demi-God
 
firedept's Avatar
 
Join Date: Jul 2011
Location: Somewhere!
This is a good thing. In this day and age, the more security the better. I won't be surprised though by how many people will not use it unless they have no option out of it.
__________________
Success only comes before work in the dictionary!
firedept is offline   0 Reply With Quote
Old Jun 30, 2014, 05:35 PM   #24
riskerin
macrumors newbie
 
Join Date: Jun 2013
issue forseen?

What does one do, however, if you are logging onto another computer to iCloud, so you can use Find my iPhone to locate that trusted IOS device they would normally send the verification code to?
riskerin is offline   1 Reply With Quote
Old Jun 30, 2014, 05:45 PM   #25
CFreymarc
macrumors 68000
 
Join Date: Sep 2009
Quote:
Originally Posted by OreoMuncher View Post
How on earth am i going to use this is school. Our school uses a cart of windows laptops and we have separate computer rooms. And obviously since I'm in school i can't use my phone... What am i going to do? Will there be an option to turn this off? I physically can't use word or powerpoint in school any more, it's too much of a headache, i really need access to iCloud. Oh god.
Forbidding access to cell phones in the class room is an obsolete policy trying to defend a nearly obsolete educational system over a century old propped up by teachers unions. There is a middle ground to make this work but the teach has to know they are no longer the sole provider of information in the classroom anymore. That went away with a broadband connection into the schools.
CFreymarc is offline   0 Reply With Quote

Reply
MacRumors Forums > News and Article Discussion > MacRumors.com News Discussion

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Forum Jump

All times are GMT -5. The time now is 05:35 PM.

Mac Rumors | Mac | iPhone | iPhone Game Reviews | iPhone Apps

Mobile Version | Fixed | Fluid | Fluid HD
Copyright 2002-2013, MacRumors.com, LLC