I was making iCloud accounts for our users here at work and one of these newly created accounts had two factor enabled from the start and will not let me turn it off. I was doing some reading and found that apple has stated that some accounts created on iOS 10.3 and later do not have the ability to turn off two-factor. This seems insane. Has anyone else come across this?
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Cannot turn off Two-factor authentification
- Thread starter dewski
- Start date
- Sort by reaction score
I turned it on - it's a lot more secure than not having it on. While it can be annoying at times it'll be useful if you ever need it, especially since it's for your co-workers.
EDIT: I forgot to say I don't think there is a way to turn it off. You can try calling Apple Support and saying what they say about it.
EDIT: I forgot to say I don't think there is a way to turn it off. You can try calling Apple Support and saying what they say about it.
The Apple support page with the info the OP is referring to is at https://support.apple.com/en-us/HT204915 .
We cannot have this feature on. We have over 100 employees out in the field and these people only have one apple device. Two factor is an extreme headache and it could be disastrous.
With iOS 11 its defaults two factor on. You MIGHT be able to disable it via icloud.com on a Mac/PC.
One device doesn't matter, just use a trusted phone number. If its for employees make the trusted phone number yours/your office/IT department.
One device doesn't matter, just use a trusted phone number. If its for employees make the trusted phone number yours/your office/IT department.
appleid.apple.com does give me the option to turn off two-factor.
Wondering if these account should be setup via MDM and Apple's DEP service (forgot what DEP stands for, but, something like Deployment Enterprise Program; setup admin "iCloud"-like accounts and all the Find My Phone and iCloud hooks are tied to that admin account).
(Note: have not used either myself, just aware of them)
Wondering if these account should be setup via MDM and Apple's DEP service (forgot what DEP stands for, but, something like Deployment Enterprise Program; setup admin "iCloud"-like accounts and all the Find My Phone and iCloud hooks are tied to that admin account).
(Note: have not used either myself, just aware of them)
Last edited:
Mine is turned off. If you don't have it on in the first place, it will not turn on involuntarily (which means it is turned on by Apple and you did not know it).
I was just going by this
Found here
https://support.apple.com/en-us/HT207198
I skimmed it and already had it on so I didn’t research it much. I guess it means new device log in?
Have you tried the steps featured here: http://osxdaily.com/2016/08/17/disable-two-factor-authentication-apple-id/
No. What it says is if there are Apple ID using 2SV, it will be automatically updated to 2FV. It does not mention any Apple ID using security questions will be updated to use 2FV when they are logged in under iOS 11.
yes I have, thank you. When I go there, no link to turn it off can be found. I think I have found what makes this happen. If you create a new @icloud address, which appears to only be possible from a iOS devices and not from the web browser, it creates an account in which two factor cannot be turned off. I think this is post ios 10.3
[doublepost=1523540579][/doublepost]Thanks for the replies. I was initially going to create these accounts using @icloud.com to keep it in line with our other existing accounts, but have decided to create the accounts in the browser using their assigned company email address. This allows me to decide whether or not to allow two-factor.
If you create the account at appleid.apple.com instead of on the device it will start out with Two Factor Authentication off.