What's the difference between "two-step verification" and "two-factor authentication" @unclemax ?
https://blog.elcomsoft.com/2016/04/apple-two-factor-authentication-vs-two-step-verification/
What's the difference between "two-step verification" and "two-factor authentication" @unclemax ?
Two-step was introduced in 2013, the idea is that you register several cell numbers and /or iOS devices as "trusted" and then whenever you log it to Apple services online, set up a new device or system just finds your behavior suspicious (e.g. you suddenly log in from different country) you will have to enter 1) iCloud password and 2) four digit code sent to the chosen trusted device.What's the difference between "two-step verification" and "two-factor authentication" @unclemax ?
It's not enabled as far as I know. My 6S+ is on 9.3.5, if that makes any difference. I go to icloud on the phone, password and security, and there's no 2AF to enable. I dunno, i'm confused here.
Oh god I'm so confused!
I just hope I've got everything enabled!
On your IOS device go to Settings, iCloud, Click on your (Account) name, go to Password & Security and you should see the option for two-Factor Authentication.Were do you turn on 2FA ?
On your IOS device go to Settings, iCloud, Click on your (Account) name, go to Password & Security and you should see the option for two-Factor Authentication.
I ran into some difficulty when I inadvertently enabled 2FA after a wipe and reinstall of Sierra.
I completely ignored the fact that it offered 2FA during a new user setup, and I blindly accepted it.
I have two Macs using the same AppleID, mostly for convenience when updating, and so that the two are setup similarly in many ways.
One is in my home.
The other is at a public venue (runs worship software at my church), so, first time that I am at the church, doing some kind of setup, my iPhone rings, and so does the church sound system (hooked up to the Mac for streaming video). That is not, of course, all about 2FA. But, I had to turn a few other settings off in iCloud, but could not turn off 2FA before authenticating my old AppleID, which was a holdover to my time as a repair tech, with an old, dead email address as the AppleID name.
Long story short, I had to have AppleID support change my AppleID account name before I could turn off 2FA, which required a tech support call to Apple. I couldn't just go in and turn it off. There were lots of obstacles that had been piling up on me, and I was mostly unaware...
I think 2FA is a good security upgrade, but sometimes you find situations where it is not convenient to have all possible iCloud settings up and running...
( Did you know that iCloud will send your iPhone ringtone for an incoming call to a public sound system hooked up to a Mac (using the same iCloud account), even if your iPhone ringer is turned off? Could be embarrassing at the wrong moment)
I know, I know, no one else would ever setup two Macs, located miles apart, with basically the same iCloud setup on both - but I did, and learned my lesson!
I just see "Two-Step Verification
I just see "Two-Step Verification: On" (no 2FA option). I'm in the U.S. / on iOS 10.
I also just read through some of the 2SV vs. 2FA documentation linked above; it's hella confusing...
I just see "Two-Step Verification: On" (no 2FA option). I'm in the U.S. / on iOS 10.
I also just read through some of the 2SV vs. 2FA documentation linked above; it's hella confusing...
Thanks. Maybe I'll try 2FA. But how is it more secure than 2SV; couldn't a thief who knows your pw just generate the login code on the (stolen) "trusted device" in his hand? And complete the login before you see the attempt on your iPad or other device?
You sign in to your Apple ID account at applied.apple.com and opt in. Word of warning. If you turn on 2FA and don't keep your info up to date you could get locked out of your account. Make sure your trusted telephone number stays up to date and have at least two trusted devices. You will need access to at least one of those trusted devices/telephone number at all times whenever you sign in to your Apple IDWere do you turn on 2FA ?
I have yet to receive the log-in code on the device that I am trying to log-in to. It goes to all your other devices. Unlike 2SV, it pop-ups up with a tone and all on your devices. 2SV just goes to the one device you want to send it to. And in order to get the code to appear on the trusted device, you must allow the device to access your account, then give i the 6 digit code. So with 2SV, the thief can send the code to the device in hand.
Ah I see thanks. I guess the trade-off is the inconvenience of needing another device on hand when signing into your own phone.
It doesn't matter. I like to see the community confirming that there are no "holes" in iCloud lock.
How does that show holes vs let's say some sort of server side issues or database mixup or something like that?I don't know the details but I believe there are holes. A Google search of' icloud unknown email' shows it is not perfect.
I have yet to receive the log-in code on the device that I am trying to log-in to. It goes to all your other devices. Unlike 2SV, it pop-ups up with a tone and all on your devices. 2SV just goes to the one device you want to send it to. And in order to get the code to appear on the trusted device, you must allow the device to access your account, then give i the 6 digit code. So with 2SV, the thief can send the code to the device in hand.
I always get the login code on ALL devices.
Maybe that's because all of my devices are trusted devices.
But how else would you do it?
If only one device is trusted and that's the one that gets stolen then you're screwed.
I logged into AppleID.Apple.com on my iPhone and I did not receive the code there. I received the code on my iMac, MBA and iPad. But not the iPhone.
Additionally, when I set it up on my MBA, I did not get the code there, but all other devices.