Apple ID security improved with new two-step verification option

Posted:
in iPhone edited January 2014
Apple on Thursday improved its security system for Apple ID accounts tied to services like iCloud and iTunes, offering users two-step verification for when making changes to an account.

Apple ID


The feature began rolling out to Apple ID owners on Thursday, and allows those with accounts for services like iCloud, the iTunes Store, App Store and others to enable it on the Apple ID website.

Once two-step verification has been turned on, a user can receive verification codes on their mobile device, such as an iPhone or iPad. On iOS devices, the codes are received via the Find My iPhone application, while other handset users can receive the code via text message.

Once the code arrives, an iOS lock screen will display the notification that users must "unlock to view your verification code."

Apple also offers users the ability to have a recovery key as a precaution, in the event that their mobile phone tied to the account is lost or stolen.

Comments

  • Reply 1 of 17
    nexusphannexusphan Posts: 260member
    Finally caught up to Google's two step verification from a few years ago. It's really a great security feature to have.
  • Reply 2 of 17
    solipsismxsolipsismx Posts: 19,566member
    nexusphan wrote: »
    Finally caught up to Google's two step verification from a few years ago. It's really a great security feature to have.

    I have never had to use a two step verification for Gmail, Google Docs, or other features that are similar to iCloud.

    Are you talking about when you use Google Voice to pair a phone number with a phone, because that's completely different.
  • Reply 3 of 17
    asciiascii Posts: 5,941member
    It's already been the case for some time that to make a purchase from a new device you have to re-enter your credit card verification code, so this isn't much of a change, they're just using their own code now.

    p.s. thoughs = those
  • Reply 4 of 17
    daharderdaharder Posts: 1,580member


    Nice... the system works much the same as Google's has for quite some time: 


     


    01) First enable it on the Apple ID website.


     


    02) Then use your mobile device to receive verification codes as needed to sign into various Apple services.

  • Reply 5 of 17
    solipsismxsolipsismx Posts: 19,566member
    ascii wrote: »
    It's already been the case for some time that to make a purchase from a new device you have to re-enter your credit card verification code, so this isn't much of a change, they're just using their own code now.

    p.s. thoughs = those

    You're right, they have had a two-step verification option, but I like this more.
  • Reply 6 of 17
    nexusphannexusphan Posts: 260member

    Quote:

    Originally Posted by SolipsismX View Post





    I have never had to use a two step verification for Gmail, Google Docs, or other features that are similar to iCloud.



    Are you talking about when you use Google Voice to pair a phone number with a phone, because that's completely different.


     


    Apple's two-step verification is identical to Google's. But, it's not a required feature. It's an opt-in.


     


    http://support.google.com/accounts/bin/answer.py?hl=en&answer=180744&topic=1099588&ctx=topic

  • Reply 7 of 17
    bsenkabsenka Posts: 799member
    Is Apple's going to be required?

    I hope not. If anything, what I want is a way to turn the security off. It's really annoying to have to keep entering my Apple ID every time I want to DL something. I'd like to see a "remember me" checkbox, so that the online stores work the same on my iPhone and iPad as they do on my Macs.
  • Reply 8 of 17

    Quote:

    Originally Posted by DaHarder View Post


    Nice... the system works much the same as Google's has for quite some time: 


     


    01) First enable it on the Apple ID website.


     


    02) Then use your mobile device to receive verification codes as needed to sign into various Apple services.



     


    Quote:

    Originally Posted by NexusPhan View Post



    Finally caught up to Google's two step verification from a few years ago. It's really a great security feature to have.


    Was Google the first to do this, or did they borrow the idea from someone else? (I remember doing two-step verifications in many websites starting in the late 1990s).


     


    If the latter, what's your point?

  • Reply 9 of 17

    Quote:

    Originally Posted by NexusPhan View Post


    Apple's two-step verification is identical to Google's. But, it's not a required feature. It's an opt-in.



    Umm.... more choice is bad?

  • Reply 10 of 17
    solipsismxsolipsismx Posts: 19,566member
    Was Google the first to do this, or did they borrow the idea from someone else? (I remember doing two-step verifications in many websites starting in the late 1990s).

    If the latter, what's your point?

    Surely Google invented it¡
  • Reply 11 of 17
    daharderdaharder Posts: 1,580member

    Quote:

    Originally Posted by SolipsismX View Post





    Surely Google invented it¡




    Something I Never Said/Posted... Ever.


     


    Though it's quite obvious that: Surely You're Just Trolling (as usual).

  • Reply 12 of 17
    mstonemstone Posts: 11,510member


    By tomorrow some hackers will have defeated it using a technique where by repeatedly dialing 911 and hanging up, then eject the sim while sending a TXT before visiting a carefully crafted web page with a self signed certificate while standing on your head in an even number zip code between 12:00 midnight and 12:01 am, only on Fridays, but it has to be a leap year.

  • Reply 13 of 17
    asciiascii Posts: 5,941member

    Quote:

    Originally Posted by mstone View Post


    By tomorrow some hackers will have defeated it using a technique where by repeatedly dialing 911 and hanging up, then eject the sim while sending a TXT before visiting a carefully crafted web page with a self signed certificate while standing on your head in an even number zip code between 12:00 midnight and 12:01 am, only on Fridays, but it has to be a leap year.



    What's up with that iOS lock screen anyway? In OS X the loginwindow process is the first to launch and all your processes are children of that. Logical and clean. What the heck are they doing in iOS that is making it so hackable?

  • Reply 14 of 17
    mstonemstone Posts: 11,510member

    Quote:

    Originally Posted by ascii View Post




    What's up with that iOS lock screen anyway? In OS X the loginwindow process is the first to launch and all your processes are children of that. Logical and clean. What the heck are they doing in iOS that is making it so hackable?



    They want you be able to use Siri for limited access to contacts and phone while the screen is locked. Also music volume, camera, remote wipe, find my phone, etc so it need some functionality even when locked. Once they have decided which features are locked and which are not, then they have to think of all the possible exploits of that semi-secure environment. Turns out those logical engineers didn't think of all the crazy ways to do it. Now that they hired Kristen Paget perhaps she will get it straightened out.

  • Reply 15 of 17
    bwikbwik Posts: 562member


    Apple iTunes / App Store has been one of the largest centers of credit card fraud activity on Earth.  So, this is probably a good thing.  Source: stuff I know and people I know in the CC industry.  Including fraud executives

  • Reply 17 of 17
    tallest skiltallest skil Posts: 43,399member


    Originally Posted by PhilBoogie View Post

    [post]


     


    Because of the ID bug.

Sign In or Register to comment.