3

I would like to add non-SMS, non-Apple 2-factor authentication to my Apple ID account.

1Password TOTP

This is the "scan a QR code"-type Time-based One Time Password (TOTP) based on RFC 6238 implemented by client apps such as:

  • Google Authenticator
  • Microsoft Authenticator
  • Authy
  • 1Password "One-Time Password"
  • LastPass
  • etc.

I do not see any such option. Is this type of authentication available for Apple ID accounts?

I am also interested in Yubikey and other similar non-SMS 2-factor or 2-step solutions.

Note: I am able to add the Apple proprietary code-generator system integrated within iOS and macOS as an alternative to SMS-based 2-factor. This question is asking instead for a 3rd-party-compatible 2-factor or 2nd-step mechanism that can be used as an alternative to the SMS-based auth that Apple does currently support.

Related:

  • 1
    I second your request. It is indeed a shame that apple implemented the way they did. Mostly apple would orient you to 2FA based on a 2nd apple device which is crasy unreliable, when you are stuck with a lost device or broken device... – Guy Jun 1 at 9:28
4

No, you cannot use TOTP-authentication as implemented by for example Google Authenticator (i.e. RFC6238) with Apple-ID. The only supported system is Apple's own system, which works very similarly to TOTP.

This hasn't got anything to do with the SMS-requirement at all.

As a collary to the above, hardware-based OATH-TOTP solutions such as a YubiKey won't work with Apple-IDs either.

2

Apple requires at least one SMS-capable phone number for Apple ID authentication:

https://support.apple.com/en-us/HT204152

Which SMS numbers should I verify for my account?

You're required to verify at least one SMS-capable phone number for your account. You should consider verifying all SMS-capable phone numbers that you normally use with your iPhone or another mobile phone. You should also consider verifying an SMS-capable phone number used by someone close to you, such as a spouse or other family member. You can use this number if you're temporarily without access to your own devices.

You can't use landline or web-based (VOIP) phone services for two-step verification.

  • 1
    I've been using Google Voice for years, and just checked that it worked as of this writing just fyi – Mohamed Hafez Jun 4 at 8:22

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .