Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
What's the difference between "two-step verification" and "two-factor authentication" @unclemax ?
Two-step was introduced in 2013, the idea is that you register several cell numbers and /or iOS devices as "trusted" and then whenever you log it to Apple services online, set up a new device or system just finds your behavior suspicious (e.g. you suddenly log in from different country) you will have to enter 1) iCloud password and 2) four digit code sent to the chosen trusted device.

two-factor was introduced in 2016 and it's pretty similar actually, first you register a trusted cell number and a trusted device (this time it can be a Mac), then when you log into a new device or Apple services online you get prompt on all trusted devices simultaneously showing the approximate location and asking whether to trust the log-in and then generates a six digit code to enter.

The main difference is (in my opinion), now you see log-in attempt on all your devices, whereas before if e.g. rogues could hijack your trusted phone number and know your iCloud password you'd never even know about it.

Also with two-step if your account got locked out you'd have to use your recovery key (given when activating the two-step), and I guess it wasn't emphasized enough to users to keep this key handy. Then there's no way to recover the account.

With two-factor Apple can assist you with gaining access if you get locked out by verifying some of your info.
[doublepost=1479568982][/doublepost]
It's not enabled as far as I know. My 6S+ is on 9.3.5, if that makes any difference. I go to icloud on the phone, password and security, and there's no 2AF to enable. I dunno, i'm confused here.

Is your country supported?
https://support.apple.com/en-us/HT205075
 
I'm always as stingy as I can be with putting info on file with anyone on line, yet here's Apple (I know it's only a recommend, but still) ---

"We also recommend that you have a valid credit card on file in your account. This information may be requested to help verify your identity if you forget your password."
 
I was using 2SV for about the last 6 months. Didn't really want to upgrade to 2FA because its a little more inconvienient IMO about every device always ringing when you try to use your AppleID on a computer, even a registered computer when accessing iCloud.com. But, with that being said, I upgraded last week and glad I did. I appreciate the map pop-up and the "allow" & "don't allow" option.
 
I ran into some difficulty when I inadvertently enabled 2FA after a wipe and reinstall of Sierra.
I completely ignored the fact that it offered 2FA during a new user setup, and I blindly accepted it.
I have two Macs using the same AppleID, mostly for convenience when updating, and so that the two are setup similarly in many ways.
One is in my home.
The other is at a public venue (runs worship software at my church), so, first time that I am at the church, doing some kind of setup, my iPhone rings, and so does the church sound system (hooked up to the Mac for streaming video). That is not, of course, all about 2FA. But, I had to turn a few other settings off in iCloud, but could not turn off 2FA before authenticating my old AppleID, which was a holdover to my time as a repair tech, with an old, dead email address as the AppleID name.
Long story short, I had to have AppleID support change my AppleID account name before I could turn off 2FA, which required a tech support call to Apple. I couldn't just go in and turn it off. There were lots of obstacles that had been piling up on me, and I was mostly unaware...
I think 2FA is a good security upgrade, but sometimes you find situations where it is not convenient to have all possible iCloud settings up and running... :D
( Did you know that iCloud will send your iPhone ringtone for an incoming call to a public sound system hooked up to a Mac (using the same iCloud account), even if your iPhone ringer is turned off? Could be embarrassing at the wrong moment :D )
I know, I know, no one else would ever setup two Macs, located miles apart, with basically the same iCloud setup on both - but I did, and learned my lesson!
 
  • Like
Reactions: willmtaylor
On your IOS device go to Settings, iCloud, Click on your (Account) name, go to Password & Security and you should see the option for two-Factor Authentication.

I just see "Two-Step Verification: On" (no 2FA option). I'm in the U.S. / on iOS 10.

I also just read through some of the 2SV vs. 2FA documentation linked above; it's hella confusing...
 
I ran into some difficulty when I inadvertently enabled 2FA after a wipe and reinstall of Sierra.
I completely ignored the fact that it offered 2FA during a new user setup, and I blindly accepted it.
I have two Macs using the same AppleID, mostly for convenience when updating, and so that the two are setup similarly in many ways.
One is in my home.
The other is at a public venue (runs worship software at my church), so, first time that I am at the church, doing some kind of setup, my iPhone rings, and so does the church sound system (hooked up to the Mac for streaming video). That is not, of course, all about 2FA. But, I had to turn a few other settings off in iCloud, but could not turn off 2FA before authenticating my old AppleID, which was a holdover to my time as a repair tech, with an old, dead email address as the AppleID name.
Long story short, I had to have AppleID support change my AppleID account name before I could turn off 2FA, which required a tech support call to Apple. I couldn't just go in and turn it off. There were lots of obstacles that had been piling up on me, and I was mostly unaware...
I think 2FA is a good security upgrade, but sometimes you find situations where it is not convenient to have all possible iCloud settings up and running... :D
( Did you know that iCloud will send your iPhone ringtone for an incoming call to a public sound system hooked up to a Mac (using the same iCloud account), even if your iPhone ringer is turned off? Could be embarrassing at the wrong moment :D )
I know, I know, no one else would ever setup two Macs, located miles apart, with basically the same iCloud setup on both - but I did, and learned my lesson!

Actually having all your devices use the same iCloud account makes perfect sense, so don't be so self-deprecating.

I have some tips for your iPhone problems. First of all, you can disable call forwarding completely. Second, Macs have Do Not Disturb mode, just like iPhones. You'll see the switch if you go to Notifications panel and scroll all the way up.
 
I just see "Two-Step Verification: On" (no 2FA option). I'm in the U.S. / on iOS 10.

I also just read through some of the 2SV vs. 2FA documentation linked above; it's hella confusing...

You must disable 2SV to enable 2FA. You have to manually enable 2FA on an macOS or iOS device. You cannot do it through the AppleID portal.
 
  • Like
Reactions: unclemax
Ah, well, my post was too long.
And, yes, same iCloud account on multiple devices is how it is all supposed to work together.
But, in my particular case - I had some of those settings turned on, when they did not need to be, and potentially would have been a source for some embarrassment for me :D
I have those settings that you mentioned mostly off now. Just took a wakeup call (literally!) to make me look again at the other settings, too
Thanks for your gentle reminder about those settings.
 
Thanks. Maybe I'll try 2FA. But how is it more secure than 2SV; couldn't a thief who knows your pw just generate the login code on the (stolen) "trusted device" in his hand? And complete the login before you see the attempt on your iPad or other device?
 
  • Like
Reactions: willmtaylor
Thanks. Maybe I'll try 2FA. But how is it more secure than 2SV; couldn't a thief who knows your pw just generate the login code on the (stolen) "trusted device" in his hand? And complete the login before you see the attempt on your iPad or other device?

I have yet to receive the log-in code on the device that I am trying to log-in to. It goes to all your other devices. Unlike 2SV, it pop-ups up with a tone and all on your devices. 2SV just goes to the one device you want to send it to. And in order to get the code to appear on the trusted device, you must allow the device to access your account, then give i the 6 digit code. So with 2SV, the thief can send the code to the device in hand.
 
Were do you turn on 2FA ?
You sign in to your Apple ID account at applied.apple.com and opt in. Word of warning. If you turn on 2FA and don't keep your info up to date you could get locked out of your account. Make sure your trusted telephone number stays up to date and have at least two trusted devices. You will need access to at least one of those trusted devices/telephone number at all times whenever you sign in to your Apple ID
 
2FA has to be enabled for watchOS 3 for the Mac unlock feature.
Basically your watch now unlocks your Mac - no password required (except 1st use after Mac has been on charge).
 
I have yet to receive the log-in code on the device that I am trying to log-in to. It goes to all your other devices. Unlike 2SV, it pop-ups up with a tone and all on your devices. 2SV just goes to the one device you want to send it to. And in order to get the code to appear on the trusted device, you must allow the device to access your account, then give i the 6 digit code. So with 2SV, the thief can send the code to the device in hand.

Ah I see thanks. I guess the trade-off is the inconvenience of needing another device on hand when signing into your own phone.
 
Ah I see thanks. I guess the trade-off is the inconvenience of needing another device on hand when signing into your own phone.

Hi
With 2FA you get a text message to your iPhone so no need for another device.
The text appears at the top of the screen and you just type in the unique number.
2FA once setup it works very well.
 
I don't know the details but I believe there are holes. A Google search of' icloud unknown email' shows it is not perfect.
How does that show holes vs let's say some sort of server side issues or database mixup or something like that?
 
  • Like
Reactions: willmtaylor
I have yet to receive the log-in code on the device that I am trying to log-in to. It goes to all your other devices. Unlike 2SV, it pop-ups up with a tone and all on your devices. 2SV just goes to the one device you want to send it to. And in order to get the code to appear on the trusted device, you must allow the device to access your account, then give i the 6 digit code. So with 2SV, the thief can send the code to the device in hand.

I always get the login code on ALL devices.
Maybe that's because all of my devices are trusted devices.
But how else would you do it?
If only one device is trusted and that's the one that gets stolen then you're screwed.
 
I always get the login code on ALL devices.
Maybe that's because all of my devices are trusted devices.
But how else would you do it?
If only one device is trusted and that's the one that gets stolen then you're screwed.

I logged into AppleID.Apple.com on my iPhone and I did not receive the code there. I received the code on my iMac, MBA and iPad. But not the iPhone.

Additionally, when I set it up on my MBA, I did not get the code there, but all other devices.
 
I logged into AppleID.Apple.com on my iPhone and I did not receive the code there. I received the code on my iMac, MBA and iPad. But not the iPhone.

Additionally, when I set it up on my MBA, I did not get the code there, but all other devices.

Just tried the link above on my iPad and I got the prompt on my iPad.
Been like that ever since setting up 2FA.
<shrug>
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.