How to set up two-factor authentication for your Apple ID and iCloud account

If you aren’t using two-factor authentication to protect your Apple ID and iCloud account, you really should do it. In the past, hackers claimed to have millions of stolen iCloud credentials are demanded Apple pay a ransom. So even as Apple does what it can to protect your data, events like this—though unlikely–can happen. And with all the valuable info on your iPhone these days, you want to make sure nobody can get reset it.

But guess what? Using two-factor authentication should protect you completely. It’s easy to set up, so take a minute and do it now.

What’s more, some Apple services and features require you to have 2FA enabled on your account, as an extra security precaution.

You used to be able to set up two-factor on the account settings page at appleid.apple.com, but now this has to be done on a Mac or iOS device. (Apple ID users who don’t have a compatible device can still use an older two-step verification system—see below for more.)

iPhone and iPad

Follow these steps on an iPad, iPhone, or iPod touch. These steps are done with iOS 14.5 or later and should be similar in iPadOS. The device must be protected with a passcode (Settings > Touch ID/Face ID and Passcode).

1. Launch the Settings app.
2. Tap your Apple ID profile at the top. Obviously you need to be signed in with the account you want to protect with two-factor authentication.
3. Tap Password & Security.
4. Find the Two-Factor Authentication setting and turn it on.
5. Next, enter a phone number where you can receive a text message or a phone call with a two-factor code. You can also specify if you want a text or a call.
6. You’ll get that text message or call and enter the six-digit verification code on the next screen.

That’s it! Two-factor is on, and this is your official Trusted Device. The next time you sign on to iCloud.com, or set up your iCloud account on a new device, you’ll have to first enter your username and password, and then be prompted to enter a code. That code will come in a pop-up on your trusted devices, texted/phoned to the number you provided, or, you can come back to this screen and tap Get Verification Code.

Mac

Setting this up on a Mac requires nearly the same steps as on an iPhone or iPad. These instructions are done with macOS Big Sur 11.3.1.

1. Open System Preferences.
2. In your profile at the top, click Apple ID.
3. The Apple ID pane should open. In the left column, click on Password & Security.
4. Find the Two-Factor Authentication setting and turn it on.
5. You might need to verify your identity by answering your security questions.
6. Enter a phone number you can use to receive verification codes, and choose if you want to get text messages or calls.
7. Enter the code that’s sent you to right away to finish up.

IDG

If your Mac is running macOS Mojave or an earlier operating system, here are the instructions.

1. Open System Preferences
2. Select iCloud. Click the Account Details button, and sign in if prompted.
3. In the Security tab, click the button labeled Turn on two-factor authentication. Read the message and click Continue.
4. Verify your identity by answering your security questions.
5. Enter a phone number you can use to receive verification codes, and choose if you want to get text messages or calls.
6. Enter the code that’s sent you to right away to finish up.

What if my device is too old?

If your Mac is using an operating system older than El Capitan, or your iOS device isn’t running iOS 9 or later, you can still use two-step verification, which is slightly different than two-factor authentication, mostly because it relies on a text message being sent to a phone number, while the newer “authentication” is baked more seamlessly into the operating systems. Plus, the older verification method requires you to hold onto a Recovery Key in case you ever lose your password.

You can read more about the differences from Apple as well as from our own Glenn Fleishman.

Apple still provides a way to enable two-step verification, by following this link, signing in, and following the instructions.