Two-factor authentication

[lordthistle]

In the screenshot you can see what happens when Apple uses 2-factor authentication on my intel iMac running Sequoia. I have also more recent Macs, but cannot remember if this happens.

Basically, according to Apple genius, in order to secure the access to my account when using Machine A, it blocks everything and asks me to provide a code displayed on the same Machine A. What's the point?

What do I need to check to make things right?

 

[FreakinEurekan]

So if you enter the code, it’s not accepting it? Or it asks for another one?

Not clear to me what exactly isn’t working here…

 

[lordthistle]

So if you enter the code, it’s not accepting it? Or it asks for another one?

Not clear to me what exactly isn’t working here…

I entered that code and for Apple the 2-factor authentication was fine: I got access to my iCloud account. If an "attacker" is using this machine, they can simply use that code - no need to access any other Apple device I own.

 

[gymrat2k]

I've also seen that on my devices. It only shows the code if you were securely logged in on the device in question.
But if you are logged in securely, why do you need the code?

 

[lordthistle]

Exactly, I should have added this. On Machine A I was already logged with my iCloud account - I asked to access iCloud from System Settings and they wanted me to authenticate me on the web via a browser.

But either you need 2-factor authentication or you don't. Either way, the current implementation is broken.

 

[Fr. Guido Sarducci]

This occurs when you are on a “trusted device”. Crazy glitch isn’t it?

Two-factor authentication for Apple Account - Apple Support

Two-factor authentication is designed to make sure that you're the only person who can access your account. Learn how it works and how to turn on two-factor authentication.

support.apple.com

 

[lordthistle]

Not particularly annoying, but they ask me to authenticate myself when I am on a trusted device and access some system settings, then show the 2-factor code on the same device. There is no logic.

 

[Bigwaff]

Not particularly annoying, but they ask me to authenticate myself when I am on a trusted device and access some system settings, then show the 2-factor code on the same device. There is no logic.

If you are concerned, you can remove your Mac as a trusted device. The code appears on any separate trusted device logged into your Apple account. That way an “attacker” would need access to both devices to succeed. Than again, if the attacker has already comprised the Touch ID or your account password and is logged into the account on your Mac, perhaps this issue is the least of your worries.