Two-factor authentication adds a second layer of protection to your Apple Account, so that signing in requires both your password and a six-digit verification code. Even if someone learns your password, they can't get into your account without a code that appears only on your trusted devices or arrives at your trusted phone number.
The good news is that most Apple Accounts already use two-factor authentication by default. If yours doesn't yet, or you simply want to confirm it's on and add a backup phone number, the steps below walk you through every surface, quickest first.
Pick the device you have in front of you. The iPhone or iPad route is fastest, the Mac route is nearly identical, and the web route works from any desktop browser when you don't have your Apple device handy.
Check What You Need First
Before you start, make sure a few things are in place so setup goes smoothly:
- A device running the latest iOS, iPadOS, or macOS, or access to a web browser plus a phone number that can receive codes.
- At least one phone number that can receive verification codes by text message or automated phone call. A trusted phone number is required to enable two-factor authentication.
- That you're in a supported country or region. Two-factor authentication is not available everywhere, and certain account types may still be ineligible at Apple's discretion.
Keep your phone within reach during setup, since you'll confirm a code sent to it before the process finishes.
Turn It On From Settings on iPhone or iPad
This is the quickest path for most people. Have your trusted phone number ready before you begin.
- 1.Open the Settings app.
- 2.Tap [your name] at the top.
- 3.Tap Sign-In & Security.
- 4.Tap Two-Factor Authentication, then follow the onscreen prompts to turn it on.
- 5.Enter a trusted phone number to receive verification codes.
- 6.Choose how you want to receive the code: text message or automated phone call.
- 7.Tap Next.
- 8.Enter the six-digit verification code sent to your trusted phone number to verify your identity and finish setup.
If a code doesn't arrive, tap "Didn't get a verification code?" to resend it.
Turn It On From System Settings on Mac
The Mac flow follows the same logic and includes a step for security questions on accounts that use them.
- 1.Choose Apple menu > System Settings.
- 2.Click your name at the top of the sidebar.
- 3.Click Sign-In & Security.
- 4.Click Turn on Two-Factor Authentication.
- 5.If prompted, enter your Apple Account password and click Sign in.
- 6.Answer your security questions, then click Continue.
- 7.Enter your phone number for verification, select a verification method, then click Continue.
- 8.Verify your identity by entering the six-digit verification code sent to your trusted phone number.
The same path applies across recent macOS versions, so the menu names should match what you see.
Turn It On From the Apple Account Website
Use this when you're at a desktop browser without your Apple device nearby.
- 1.Go to account.apple.com and sign in to your Apple Account.
- 2.If prompted, enter a code sent to your email address or answer your security questions.
- 3.Click Upgrade Account Security, then follow the onscreen instructions.
- 4.Provide a trusted phone number and verify with the six-digit code when prompted to complete setup.
The current address is account.apple.com, so sign in there to manage your account security.
Add a Trusted Phone Number for Backup
Keep at least one trusted phone number on file at all times, and add a second if you can. This is your fallback when no trusted device is available.
- On iPhone or iPad: Settings > [your name] > Sign-In & Security > Two-Factor Authentication > tap Add a Trusted Phone Number.
- On Mac: Apple menu > System Settings > [your name] > Sign-In & Security > Two-Factor Authentication > click Add a Trusted Phone Number.
- On the web: account.apple.com > Sign-In and Security > the Trusted Phone Number section, where you can add or remove numbers.
Get a Verification Code When One Doesn't Arrive
Once two-factor authentication is on, you'll usually see a code appear automatically on a trusted device. If you don't, you can pull one manually, even offline.
- 1.On a trusted device, tap Allow on the sign-in notification to reveal the six-digit code, then enter it on the other device.
- 2.To pull a code on iPhone or iPad (this works even if the device is offline): Settings > [your name] > Sign-In & Security > Two-Factor Authentication > tap Get Verification Code.
- 3.To pull a code on Mac: System Settings > [your name] > Sign-In & Security > Two-Factor Authentication > click Get a Verification Code, enter the code from the notification, then click OK.
- 4.If you have no trusted device handy, on the verification screen choose "Didn't Get a Code?" (or "Can't get to your devices?") and have a code sent by text message or phone call to your trusted phone number.
Tips and Gotchas Worth Knowing
A few details catch people out, so keep these in mind before and after you turn the feature on:
- You generally can't turn two-factor authentication off. If your account was created with it, the protection can't be removed at all. If you recently enabled it yourself, you can lower your account security only within two weeks of enrollment; after that it's permanent.
- A trusted device is an iPhone, iPad, Apple Watch, Apple Vision Pro, or Mac on which you've already signed in to your Apple Account using two-factor authentication. A brand-new device can't display codes until it has been signed in this way.
- Newly added trusted devices have a brief delay before they can authorize critical changes like password or security updates. Use an established trusted device during that period.
- If you own only one Apple device, receiving codes can be more problematic, so adding one or more trusted phone numbers as a fallback is strongly advised.
- Text codes can be filtered. If you use Unknown Senders filtering in Messages, the code may land there. To get time-sensitive codes, enable notifications via Settings > Apps > Messages > (Unknown Senders) > Time Sensitive messages.
- Don't trust the browser when prompted on a public or shared computer.
- Never share your verification code with anyone. Apple won't ask you for it.
Frequently Asked Questions
Do I even need to set this up, or is it already on?
Most Apple Accounts already use two-factor authentication by default. Open Settings > [your name] > Sign-In & Security to check. If it isn't on yet, the steps above will enable it.
Can I turn two-factor authentication off later if I change my mind?
Usually no. If your account was created with it, it can't be removed. If you just enabled it, you have a two-week window from enrollment to lower your account security, after which it becomes permanent.
How do I get a code if my trusted device has no internet connection?
On iPhone or iPad, go to Settings > [your name] > Sign-In & Security > Two-Factor Authentication > Get Verification Code. This works even when the device is offline. On Mac, use the Get a Verification Code button in the same section.
What if I only own one Apple device?
Receiving codes can be more problematic with a single device, so add one or more trusted phone numbers as a backup. That way you can still receive a code by text or automated phone call.
I'm locked out with no trusted device or phone number. What now?
On the verification screen, choose "Can't use [phone number]" to start account recovery. This process might take a few days or longer, so it's a last resort rather than a quick fix.
Why didn't my text code arrive?
It may have been filtered by Unknown Senders in Messages. Enable Settings > Apps > Messages > (Unknown Senders) > Time Sensitive messages, or tap "Didn't get a verification code?" on the setup screen to resend it.
