Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cloud Security

Apple Makes Two Factor Authentication Available for Apple IDs

In an effort to increase security for user accounts, Apple on Thursday introduced a two-step verification option for Apple IDs.

In an effort to increase security for user accounts, Apple on Thursday introduced a two-step verification option for Apple IDs.

As the “epic hacking” of Wired journalist Mat Honan proved, an Apple ID often carries much more power than the ability to buy songs and apps through Apple’s App store.  

An Apple ID can essentially be the keys to the Kingdom when it comes to Apple devices and user maintained data, and as Apple explains, is the “ key to many important things you do with Apple, such as purchasing from the iTunes and App Stores, keeping personal information up-to-date across your devices with iCloud, and locating, locking, or wiping your devices.”

Two-step verification is a feature you can use to keep your Apple ID as secure as possible, Apple said.

“After you turn [Two-step verification] on, there will be no way for anyone to access and manage your account at My Apple ID other than by using your password, verification codes sent your trusted devices, or your Recovery Key,” a note from Apple explained.

To setup two-step verification, users need to register one or more “trusted” devices, a device that can receive a 4-digit verification code through either Find My iPhone notifications or SMS.

Once signed in using an Apple ID through My Apple ID, or through iTunes, the App Store, or iBookstore, users need to enter their password and a 4-digit verification code as shown in the diagram below.

Two Step Verification for Apple ID Process

Apple also provides a 14-digit Recovery Key they can be used to regain access to an account if a trusted device is lost or password is forgotten.

Advertisement. Scroll to continue reading.

If you use your Apple ID for anything more than simply making purchase via iTunes, you’d be crazy not to take advantage of this added security measure. While it has been available for years, any Gmail users not yet using it, should be taking advantage of Google’s two-step verification security option as well. 

More information on Apple’s two-step verification is available here

Written By

For more than 15 years, Mike Lennon has been closely monitoring the threat landscape and analyzing trends in the National Security and enterprise cybersecurity space. In his role at SecurityWeek, he oversees the editorial direction of the publication and is the Director of several leading security industry conferences around the world.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

Shaun Khalfan has joined payments giant PayPal as SVP, CISO.

More People On The Move

Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

Identity & Access

Zero trust is not a replacement for identity and access management (IAM), but is the extension of IAM principles from people to everyone and...

CISO Conversations

SecurityWeek talks to Billy Spears, CISO at Teradata (a multi-cloud analytics provider), and Lea Kissner, CISO at cloud security firm Lacework.

Cloud Security

Cloud security researcher warns that stolen Microsoft signing key was more powerful and not limited to Outlook.com and Exchange Online.

CISO Strategy

Okta is blaming the recent hack of its support system on an employee who logged into a personal Google account on a company-managed laptop.

Compliance

Government agencies in the United States have made progress in the implementation of the DMARC standard in response to a Department of Homeland Security...

Email Security

Many Fortune 500, FTSE 100 and ASX 100 companies have failed to properly implement the DMARC standard, exposing their customers and partners to phishing...

Funding/M&A

The private equity firm merges the newly acquired ForgeRock with Ping Identity, combining two of the biggest names in enterprise IAM market.