How to set up two-factor authentication for your Apple Account and iCloud

If you aren’t using two-factor authentication to protect your Apple Account and iCloud account, you really should do it. In the past, hackers claimed to have millions of stolen iCloud credentials are demanded that Apple pay a ransom. So even as Apple does what it can to protect your data, events like this–though unlikely–can happen. And with all the valuable info on your iPhone these days, you want to make sure nobody can get reset it.

But guess what? Using two-factor authentication should protect you completely. It’s easy to set up, so take a minute and do it now.

What’s more, some Apple services and features require you to have 2FA enabled on your account, as an extra security precaution. Here’s how to set it up on a Mac or iOS device. (Apple Account users who don’t have a compatible device can still use an older two-step verification system. See below for more.)

One note: Apple changed the name of Apple ID to Apple Account in iOS 18 and macOS Sequoia.

iPhone and iPad

Follow these steps on an iPad or iPhone. These steps are done with iOS 18 or later and should be similar in iPadOS. The device must be protected with a passcode (Settings > Touch ID/Face ID & Passcode).

1. Launch the Settings app.
2. Tap your Apple Account profile at the top. Obviously, you need to be signed in with the account you want to protect with two-factor authentication.
3. Tap Sign-In & Security.
4. Find the Two-Factor Authentication setting and turn it on.
5. Next, enter a phone number where you can receive a text message or a phone call with a two-factor code. You can also specify if you want a text or a call.
6. You’ll get that text message or call and enter the six-digit verification code on the next screen.

That’s it! Two-factor is on, and this is your official Trusted Device. The next time you sign on to iCloud.com, or set up your iCloud account on a new device, you’ll have to first enter your username and password, and then be prompted to enter a code. That code will come in a pop-up on your trusted devices, texted/phoned to the number you provided, or, you can come back to this screen and tap Get Verification Code.

Mac

Setting this up on a Mac requires nearly the same steps as on an iPhone or iPad. These instructions are done with macOS Sequoia 15.3.2

1. Open System Settings.
2. In your profile at the top, click Apple Account.
3. The Apple Account pane should open. In the mian section, click on Sing-In & Security.
4. Find the Two-Factor Authentication setting and turn it on.
5. You might need to verify your identity by answering your security questions.
6. Enter a phone number you can use to receive verification codes, and choose if you want to get text messages or calls.
7. Enter the code that’s sent you to right away to finish up.

If your Mac is running macOS Mojave or an earlier operating system, here are the instructions.

1. Open System Preferences
2. Select iCloud. Click the Account Details button, and sign in if prompted.
3. In the Security tab, click the button labeled Turn on two-factor authentication. Read the message and click Continue.
4. Verify your identity by answering your security questions.
5. Enter a phone number you can use to receive verification codes, and choose if you want to get text messages or calls.
6. Enter the code that’s sent you to right away to finish up.

What if my device is too old?

If your Mac is using an operating system older than El Capitan, or your iOS device isn’t running iOS 9 or later, you can still use two-step verification, which is slightly different than two-factor authentication, mostly because it relies on a text message being sent to a phone number, while the newer “authentication” is baked more seamlessly into the operating systems. Plus, the older verification method requires you to hold onto a Recovery Key in case you ever lose your password.

You can read more about the differences from Apple as well as from our own Glenn Fleishman.

Apple still provides a way to enable two-step verification, by following this link, signing in, and following the instructions.