Apple ID

How to Enable Two-Factor Authentication on Apple ID

Your Apple ID is the master key to your digital life — it unlocks iCloud backups, photos, messages, contacts, Apple Pay, and the App Store. A stolen password alone is enough to give an attacker full access. Two-factor authentication (2FA) adds a second barrier: even if someone knows your password, they still can't sign in without a verification code sent to one of your trusted devices.

Apple's 2FA is built directly into iOS, iPadOS, and macOS. Once enabled, every sign-in from a new device or browser prompts a six-digit code on your existing Apple devices, making unauthorized access extremely difficult.

Important: Once 2FA has been active for more than two weeks, Apple does not allow you to turn it off. It becomes a permanent part of your account security, so make sure you have access to a trusted phone number before enabling it.

Enable 2FA on iPhone or iPad

This is the most common way to set up 2FA and only takes about a minute.

  1. Open Settings — Tap the Settings app on your iPhone or iPad home screen.
  2. Tap Your Name — At the very top of Settings, tap your name to open your Apple ID page.
  3. Go to Sign-In & Security — Tap Sign-In & Security (on older iOS versions this may appear as Password & Security).
  4. Tap Two-Factor Authentication — Tap Turn On Two-Factor Authentication and confirm by tapping Continue.
  5. Add a Trusted Phone Number — Enter the phone number where you'd like to receive verification codes. Choose SMS or automated phone call. Apple will send a code to verify — enter it to complete setup.
Done! 2FA is now active on your Apple ID. Your iPhone and iPad are automatically trusted devices. Future sign-ins from new devices will prompt a code on your existing Apple devices.

Enable 2FA on Mac

If you prefer to set up 2FA from your Mac, here's how:

  1. Open System Settings — Click the Apple menu (🍎) in the top-left corner, then choose System Settings (or System Preferences on older macOS).
  2. Click Your Apple ID — At the top of the sidebar, click your name to open the Apple ID panel.
  3. Open Sign-In & Security — Click Sign-In & Security from the left menu. You'll see a Two-Factor Authentication toggle or button.
  4. Turn On and Verify — Click Turn On and follow the prompts. Provide a trusted phone number and verify with the code Apple sends.

Enable 2FA via the Web

You can also enable 2FA from any browser if you don't have an Apple device handy (though you'll still need a phone number to verify):

  1. Go to appleid.apple.com — Visit appleid.apple.com and sign in with your Apple ID credentials.
  2. Find the Security Section — Scroll to Sign-In and Security and look for Two-Factor Authentication. Click Get Started.
  3. Add Your Phone Number — Enter a phone number, choose SMS or phone call, verify with the code sent, and you're done.

How Apple 2FA Works

After setup, whenever you sign in to your Apple ID on a new device or browser, you enter your password as usual. A six-digit verification code then appears automatically on your other trusted Apple devices (iPhone, iPad, Mac). You enter that code to complete the sign-in.

Apple also supports receiving the code via SMS or phone call on your trusted phone number as a fallback. In some cases, Apple can auto-verify your iPhone in the background, so you won't even need to enter a code manually.

Trusted Devices vs. Trusted Phone Numbers

A trusted device is any Apple device you've already signed into with 2FA — your iPhone, iPad, or Mac. These receive verification codes automatically. A trusted phone number is a backup channel — SMS or phone call — used when trusted devices aren't available. You should have at least one of each.

Tips & Things to Know

  • Add a backup phone number: Go to Settings → [Your Name] → Sign-In & Security → Trusted Phone Numbers and add a second number (a family member's, for example) as a recovery fallback.
  • It can't be turned off after two weeks: For accounts created in iOS 10.3 or later, Apple permanently locks 2FA after the two-week window.
  • Verification codes expire quickly: Each code is only valid for a short time. If you wait too long, request a new one.
  • Never share your verification code: Apple will never call or text you asking for a verification code. If someone does, it's a scam.

Frequently Asked Questions

Can I use an authenticator app with Apple ID?

Apple ID's built-in 2FA uses its own trusted device / SMS system rather than third-party TOTP apps like Google Authenticator. There is no QR code to scan — Apple handles code delivery through its own ecosystem.

What if I don't get a verification code?

On the sign-in screen tap "Didn't get a code?" to resend it, or choose to receive it via SMS on your trusted phone number. Make sure your devices are online and notifications are enabled.

Can I turn off Apple ID 2FA?

Only within two weeks of enabling it. Open the confirmation email Apple sent when you first set up 2FA and click the "return to previous security settings" link. After the two-week window, 2FA cannot be disabled for most accounts.

What if I lose access to all my trusted devices?

Use your trusted phone number to receive an SMS code. If you've lost access to that too, visit appleid.apple.com and start account recovery. The process can take a few days to verify your identity.

Does Apple 2FA work on iCloud.com?

Yes. Signing in to iCloud.com from a new browser triggers the 2FA verification flow, sending a code to your trusted Apple devices or phone number.