Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

New Apple ID Sign-In Options: Phone Number on File or Trusted Device

MacRumors

MacRumors

macrumors bot
Original poster
Apr 12, 2001
67,505
37,794


The upcoming iOS 17, iPadOS 17, and macOS Sonoma updates for the iPhone, iPad, and Mac include a couple of new sign-in methods for an Apple ID account.

iOS-17-Passkey-With-Apple-ID-Feature-3.jpg

First, it is now possible to sign into an Apple ID with any phone number or secondary email address on file with the account. We were able to sign into an Apple ID with a phone number on the Apple ID website using a Mac running macOS Ventura, so it's unclear if this feature specifically requires the new software updates or is simply a backend change.

Second, starting with an iOS 17 update coming later this year, there will be a new Apple ID proximity sign-in feature. This will allow you to bring an existing signed-in and trusted iPhone or iPad into proximity with a new device being set up, pair the devices by scanning an on-screen "particle cloud," and complete sign-in automatically.

iOS 17, iPadOS 17, and macOS Sonoma also added passkey support to Apple IDs.

Apple announced that iOS 17 and iPadOS 17 will be released on Monday, September 18, while macOS Sonoma launches Tuesday, September 26.

Article Link: New Apple ID Sign-In Options: Phone Number on File or Trusted Device
 
Article Link
https://www.macrumors.com/2023/09/13/new-apple-id-sign-in-options-ios-17/
  • Like
Reactions: Pinkyyy 💜🍎 and MathersMahmood
It’s the fundamental dilemma of security. You want to make it invisible to legitimate people but impenetrable to others.

I can easily imagine being grateful for being able to sign in with a device. I can also easily imagine somebody getting hacked as a result.

There isn’t a good answer. For example … you might think that it would be a good idea for Apple to offer an option to enable or disable this. But there will still be cases where the option is in the worng state — somebody regrets enabling it, somebody else regrets disabling it.

Ultimately … life is imperfect.

b&
 
  • Like
Reactions: Pinkyyy 💜🍎, b17777, MNGR and 8 others
I think some people are confused by the wording here. This is not SMS 2FA, nor is that a replacement to Yubikey or the classical Apple OTP authentification with a code sent to known Apple devices. It’s not even a replacement to passkey. This only means that you can enter your phone number as the ID. You still need to provide a password and to do the same 2steps authentification as usual.

Many Apple IDs are not a very private information anyway as it is often the primary email address of an user, so providing more possible "username" options is not making it less secure
 
Last edited:
  • Like
Reactions: Pinkyyy 💜🍎, MuppetGate, d.o.p. and 11 others
And if you're one of the millions still forced to use two separate A-IDs (one for iCloud, one for Stores); which A-ID does it 'decide' to log you in to?
 
Trusted device. Oh yeah that 6-digit passcode thingy gonna carry even more weight.
Mind you guys the new assistive access mode thing requires you to give up alphanumeric passcode to access.
Apple really has lots of confidence in making sure their customer info is not leaked to third parties and hackers.
What’s going to happen next? SSN? Government ID? Passport number?
 
  • Wow
  • Like
Reactions: Pinkyyy 💜🍎 and gusmula
fwmireault said:
How so?
Click to expand...
First the issue that trusted devices can change your AppleID/iCloud password only using your device passcode (6 digits). Now the possibility to sign-in using just an SMS code or a code sent by email.

It's very convenient, I get it. But some users maybe need or want better security.

I think this is going to lead to more account takeovers in the future by scammers.
 
  • Like
Reactions: Pinkyyy 💜🍎 and Shirasaki
MilaM said:
First the issue that trusted devices can change your AppleID/iCloud password only using your device passcode (6 digits). Now the possibility to sign-in using just an SMS code or a code sent by email.
Click to expand...
The first issue is indeed concerning and I wish Apple would fix it. But the new feature with the phone number is not a password or multiple factor authentification replacement. It just means that you can provide your phone number as your Apple username rather than the primary email. Your primary email is most likely not a private information anyway, so even if someone knows your phone number, they still need a password, a six digits code from a trusted device, or a Yubikey to log in
 
  • Like
Reactions: Pinkyyy 💜🍎
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back