How to Enable Two-Factor Authentication on an Apple ID

Your Apple ID is the master key to your entire digital life on Apple’s ecosystem. It holds your payment cards, your entire photo library, years of iCloud backups, your App Store purchases, and your personal emails. A strong password alone is no longer sufficient to protect this data. Two-Factor Authentication (2FA) adds a critical second layer of defence by ensuring that even if a cybercriminal obtains your password through a phishing attack or a data breach, they still cannot access your account without physical access to one of your trusted Apple devices.

How Two-Factor Authentication Works

When you attempt to sign into your Apple ID on a new device or browser, the process works like this:

1. You enter your Apple ID email address and password as normal.
2. Apple’s servers detect that this is an unfamiliar device and trigger a 2FA challenge.
3. A six-digit verification code is automatically pushed as a notification to the screen of every device that is already trusted and signed into your Apple ID (such as your current iPhone, iPad, or Mac).
4. You must read this code from your trusted device and type it into the new device within a short time window.
5. Only after both the password and the code are correctly entered does Apple grant access.

Since the six-digit code expires quickly and is delivered to your physical devices, a hacker halfway around the world cannot complete a login even with your exact password.

How to Enable 2FA on an iPhone or iPad

1. Open the Settings app on your iPhone or iPad.
2. Tap your name and profile picture at the very top of the Settings menu to open your Apple ID settings.
3. Tap on Sign-In & Security (on older iOS versions this section was labelled “Password & Security”).
4. Tap Turn On Two-Factor Authentication.
5. Tap Continue on the information screen.
6. You will be prompted to enter a trusted phone number. This is the mobile number Apple will send an SMS text message or automated phone call to as a backup verification method. Enter your number and tap Next.
7. Apple will immediately send a six-digit verification code to that number via SMS. Enter the code to verify it is a real, active number.
8. Two-Factor Authentication is now active on your account.

How to Enable 2FA on a Mac

1. Click the Apple menu () in the top-left corner of your screen and select System Settings (or System Preferences on older macOS versions).
2. Click your name and profile picture at the top of the left-hand sidebar to open your Apple ID settings.
3. Click on Sign-In & Security.
4. Click the Turn On button next to “Two-Factor Authentication.”
5. Follow the on-screen instructions to verify your trusted phone number.

What Happens After You Enable 2FA

Once 2FA is active, the next time you sign into iCloud.com from a web browser, purchase a new iPhone, or install a new Mac and try to sign in with your Apple ID, you will see a prompt on all your existing Apple devices showing a small map of where the sign-in attempt is coming from, along with a prompt asking “Allow” or “Don’t Allow.” If you tap Allow, the six-digit code appears on your screen for you to enter on the new device.

Can You Turn Off Two-Factor Authentication?

Apple strongly discourages disabling 2FA once it has been enabled, and on newer accounts, it may not be possible to turn it off at all. This is a deliberate design decision by Apple to protect users from account takeovers. If you enabled it recently and change your mind, you may be able to disable it by finding the confirmation email Apple sent when you enrolled and clicking the link within two weeks of activation.