Quick two factor authentication question.

[iapplelove]

Hello all, just a quick question and observation. It’s probably just me.

The other day I logged into my Apple ID, first time probably since I bought my iPhone X back in Nov. I needed to change my Apple ID email address.

Anyways, I noticed before I was able to sign in Apple sent a alert and a 6 digit pin to both my iPhone and iPad??

I always thought the pin only came to one specific device. So if someone has one of your devices and somehow knows the Apple ID password they can get around two factor ?

Again it’s been a while since I needed to use it, but I assumed the notification would come to only one specific trusted device only?

 

[chabig]

Nope. The notifications go to all of your trusted devices. They’re trusted, after all. And obviously another pserson who has access to one of your logged in devices and knows your AppleID and password can muck around with your account. That’s why you have a responsibility to control who has access to your machines.

Note that persons who have their own accounts on your Mac won’t be logged in with your AppleID, so they won’t receive two-factor notifications.