15

I would like to add non-SMS, non-Apple multi-factor authentication to my Apple ID.

1Password TOTP

Specifically the "code generator"-type Time-based One-Time Password (TOTP) based on RFC 6238 implemented by client apps such as:

  • Google Authenticator
  • Microsoft Authenticator
  • Yubico Authenticator
  • Authy
  • 1Password
  • LastPass
  • etc.

I do not see any such option. Is this type of authentication available for Apple ID?

I am also interested in adding YubiKey or other similar non-SMS hardware or software multi-factor solutions.


Note: I am able to add Apple's proprietary "two-factor authentication for Apple ID" integrated within iOS and macOS as an alternative to SMS-based "two-step verification". This question is asking instead for a 3rd-party-compatible two-factor mechanism that does not involve using an Apple device signed in to iCloud.


Related:

3
  • 4
    I second your request. It is indeed a shame that apple implemented the way they did. Mostly apple would orient you to 2FA based on a 2nd apple device which is crasy unreliable, when you are stuck with a lost device or broken device...
    – Guy
    Jun 1 '19 at 9:28
  • 2
    In 2021 Apple still doesn't adopt open industry standards like TOTP for authentication, and they claim to be at the forefront of security and ease-of-use. This is quite disappointing.
    – Manchineel
    Feb 7 at 13:52
  • 1
    I was surprised by this as well. I thought Apple was supposed to be ahead of the game on security yet falls back to woefully insecure SMS-based 2FA if you don't want to use an Apple device for it. Security, but only if you pay us!
    – Iguananaut
    Apr 15 at 15:01
11

No, you cannot use TOTP-authentication as implemented by for example Google Authenticator (i.e. RFC6238) with Apple-ID. The only supported system is Apple's own system, which works very similarly to TOTP.

This hasn't got anything to do with the SMS-requirement at all.

As a collary to the above, hardware-based OATH-TOTP solutions such as a YubiKey won't work with Apple-IDs either.

1
  • Thanks for the confirmation. I'll change the accepted answer if this is ever possible in the future.
    – pkamb
    Sep 25 '19 at 22:58

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .