I noticed that when I enabled two-factor authentication for my Apple ID and have handoff turned on, the code pops up on the mac where I'm seeking the two factor. Seems like it renders the two-factor worthless. Isn't the point it have it go to another device, separate from the login device?

I guess the obvious solution is to not have handoff on the mac?

marked as duplicate by fsb, Allan, nohillside Dec 21 '18 at 18:19

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • 1
    Why does that make the two-factor worthless? Do you expect an attacker to have access to your Mac? The point is not to have the second factor go to a different device, it’s to have it go to a device that you have said is yours. – Mike Scott Dec 21 '18 at 16:45