2

I've setup 2 Factor auth on all my apple devices (iMac, MacBook Air, iPhone, iPad Pro) but it doesn't work how I would expect and isn't like other services like Digital Ocean, CloudFlare etc.

For example, say I am using my MacBook Air and try to sign into beta.apple.com. I get the promo for

Your Apple ID is being used to sign in to a new device (Do not allow, Allow).

If I click allow I see the verification code so I can enter it on the website. If my MacBook Air was stolen and they had my Apple password they would be able to gain access to my account.

This is unlike one of the services I mentioned above where I use Authy which is on my phone. The attacker would need access to both to be able to get in.

Why doesn't the verification code from apple get sent to separate devices, or use a third party app?

Improve this question

1 Answer 1

Reset to default
2

The verification code is available on all trusted devices. Since you're logged into iCloud in System Preferences, your Mac is a trusted device and can receive verification codes.

With other services that use 2FA, you've set up Authy, but you only have Authy on your phone. If you installed a 2FA code generator app on your computer, then you would be able to generate codes there too, as you can with iCloud.

Improve this answer
2
  • Thats true, but I have to open authy, which is again behind my fingerprint. Apple's version just shows it right away. I don't see how that is secure.
    – Craig Ward
    Jun 29, 2018 at 14:06
  • @Craig Your macOS Keychain is unlocked because your account is unlocked using your password or Touch ID, in the same way as your iOS Keychain when you unlock your iOS device.
    – grg ♦
    Jun 29, 2018 at 14:08

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .