Apple Introduces Revamped Two-Factor Authentication for iOS 9 and OS X El Capitan

With the third betas of iOS 9 and OS X 10.11 El Capitan, Apple is introducing a revamped two-factor authentication system, according to both the beta release notes and a detailed support FAQ that outlines the changes.

The new two-factor authentication system is different from Apple's existing two-step verification system, using "different methods" to trust devices and deliver verification codes. Apple also says it includes a "more streamlined user experience."

Based on the support document, the new two-factor authentication system works similarly to the existing two-step verification system. Any device that you sign into using two-factor authentication in iOS 9 or El Capitan becomes a trusted device that can be used to verify identify when signing into other devices or services linked to an Apple ID.

appletwostepauth
Apple recommends that iOS 9 and OS X El Capitan beta testers using the new two-factor authentication system update all of their devices to iOS 9 or El Capitan for "the best experience." As outlined in the release notes, customers who use two-factor authentication with older devices may be required to put a six-digit verification code at the end of a password instead of using a dedicated verification field.

If you enable two-factor authentication, iTunes purchases on Mac and Windows will require you to append a 6-digit code to the end of your password on every purchase. The 6-digit code will automatically be sent to your iOS 9 or OS X El Capitan devices.

Older devices are also not able to receive two-factor authentication codes when used with devices running iOS 9 and El Capitan, but customers who stick with the older two-step verification system should not run into any issues as Apple tests the newer two-factor authentication system. Apple does not recommend that customers using two-step verification swap over to two-factor authentication until the feature is available to all.

First introduced in March of 2013, two-factor verification is an opt-in system that increases the security of Apple ID accounts. Since its debut, Apple has been working to expand two-factor authentication to cover several different services like iCloud, iMessage, and FaceTime.

It is not entirely clear what other changes the new two-factor authentication system brings to iOS and Mac devices, but the switch to a new system may allow Apple to further extend the functionality of two-factor authentication in the future.

Update: An Apple spokesperson told Macworld that the troublesome recovery key feature that has caused people to lose their Apple ID accounts in the past has been removed in the new two-factor authentication system.

With the existing two-step verification system, either a recovery key or a trusted device/trusted phone number is required to access an Apple ID account. If both should be lost, such as when a trusted device is stolen, an Apple ID is irretrievable.

With the new authentication system, Apple's customer support team will help users recover their Apple IDs through a recovery process should both trusted devices and phone numbers become inaccessible.

If you can't sign in, reset your password, or receive verification codes, you can regain access to your account by requesting account recovery. Simply provide a verified phone number where you can receive a text message or phone call regarding your account. Apple will review your case and contact you at the number provided when your Apple ID is ready for recovery. The automated message will direct you to iforgot.apple.com to complete the required steps and regain access to your account.

Account recovery will take a few days—or longer—depending on how much information you can provide to verify that you are the account owner. The process is designed to get you back into your account as quickly as possible while denying access to anyone who might be pretending to be you.

As noted by Apple, not all beta testers and developers will have access to the new two-factor authentication system right away, but Apple plans to add additional testers gradually as we get closer to the release of iOS 9 and OS X El Capitan.

Related Forums: iOS 9, OS X El Capitan

Popular Stories

iCloud General Feature Redux

iPhone Users Who Pay for iCloud Storage Receive a New Perk

Thursday March 20, 2025 12:01 am PDT by
If you pay for iCloud storage on your iPhone, Apple has a new perk for you, at no additional cost. The new perk is the ability to create invitations in the Apple Invites app for the iPhone, which launched in the App Store last month. In the Apple Invites app, iCloud+ subscribers can create invitations for any occasion, such as birthday parties, graduations, baby showers, and more. Anyone ...
apple wallet drivers license feature iPhone 15 pro teal 1

Apple Says iPhone Driver's Licenses Coming to These 8 U.S. States, But Rollout Remains Slow

Wednesday March 19, 2025 6:55 am PDT by
In select U.S. states, residents can add their driver's license or state ID to the Wallet app on the iPhone and Apple Watch, providing a convenient and contactless way to display proof of identity or age at select airports and businesses, and in select apps. Unfortunately, this feature continues to roll out very slowly. It has been three and a half years since Apple first announced the...
Generic iOS 19 Feature Mock

iOS 19 Coming in June With These New Features

Thursday March 20, 2025 2:04 pm PDT by
While the first iOS 19 beta is still more than two months away, there are already plenty of rumors about the upcoming software update. Below, we recap the key iOS 19 rumors so far. visionOS-Like Design In January, the YouTube channel Front Page Tech revealed a redesigned Camera app that is allegedly planned for iOS 19. According to Front Page Tech host Jon Prosser, the Camera app...
Windows Vista

Apple Might Be Having Its Windows Vista Moment, Says Analyst

Thursday March 20, 2025 6:52 am PDT by
Is Apple experiencing a "Vista-like drift into systemically poor execution?" That was a question posed by well-known technology analyst Benedict Evans, in a recent blog post covering Apple's innovation and execution, or seemingly lack thereof as of late. He is referring to Microsoft's Windows Vista operating system, which was widely criticized when it launched in 2007 due to software bugs,...
iPhone 17 Air Fanned Feature

First iPhone 17 Air Case Has Camera Bar, Camera Control Button Cutouts

Wednesday March 19, 2025 5:29 am PDT by
Serial leaker Sonny Dickson today shared an image of what he claims is a first look at a third-party case for Apple's iPhone 17 Air. "If you didn’t know an Air was coming, you'd swear it was a Google Pixel case," he said. Case manufacturers often obtain design specifications of upcoming iPhone models before their release by collaborating with Apple through official partnerships or...
iPhone 17 Pro Render Front Page Tech

Latest iPhone 17 Pro Dummies Highlight Apple's New Part-Glass Design

Thursday March 20, 2025 5:27 am PDT by
Seasoned leaker Sonny Dickson has shared more dummy models of Apple's upcoming iPhone 17 series, with the latest lot revealing a noticeable shift in Apple's iPhone Pro model design that goes beyond the much-talked-about new rear camera bar. Dickson points out that the iPhone 17 Pro dummy models feature an outlined area on the back, beginning just below the camera module and extending to the...
iphone 16 pro ghost hand

Next Year's iPhone 18 Pro Already Rumored to Have Five New Features

Tuesday March 18, 2025 1:00 pm PDT by
While the iPhone 18 Pro models are still around a year and a half away from launching, there are already some early rumors about the devices. Below, we recap some key iPhone 18 Pro rumors so far. Under-Screen Face ID In April 2023, display industry analyst Ross Young shared a roadmap showing that iPhone 17 Pro models would feature under-display Face ID. In May 2024, however, Young said ...
Generic iOS 19 Feature Mock

iOS 19 and iOS 20 Must Include a Long List of Major Changes, EU Says

Wednesday March 19, 2025 10:26 am PDT by
The European Commission today announced a long list of changes that Apple is legally required to implement in future iOS 19 and iOS 20 updates. The announcement clarifies interoperability requirements that Apple is required to adhere to in the EU, under the Digital Markets Act, which has been fully enforced since March 2024. The changes will further open up the iPhone and its technologies to ...
airpods pro 2 gradient

AirPods Pro 3 Launch Now Just Months Away: Here's What We Know

Tuesday March 18, 2025 9:13 am PDT by
Despite being released over two years ago, Apple's AirPods Pro 2 continue to dominate the wireless earbud market. However, with the AirPods Pro 3 expected to launch in 2025, anyone thinking of buying Apple's premium earbuds may be wondering if the next generation is worth holding out for. Apart from their audio and noise-canceling performance, which are generally regarded as excellent for...

Top Rated Comments

christarp Avatar
127 months ago
Good, app specific passwords, two factor authentication, etc as it is right now is just confusing as all hell. It took me like 30 minutes to sign into imessage on my mac because of the app specific password crap. It was a PITA to set up.
Score: 8 Votes (Like | Disagree)
Erukian Avatar
127 months ago
The fact that people are involved isn't what concerns me. What concerns me is that for this to work Aplle must retain the ability to access your account, meaning they can be obliged to access your account by the American government, and people hacking Apple can access your account too. This I bad news. Remember when Apple were promoting the fact that if the NSA asked for access to your account Apple were unable to comply even if they wanted to? Clearly this is no longer the case.
This, a thousand time this. Apple being able to provide access to your account means apple holds the master key to unlock your account. This is a blow to us who rely on Apple for privacy as it's allows open season access for the US Govt or clever social engineers.
Score: 8 Votes (Like | Disagree)
mazz0 Avatar
127 months ago
Idiots!

Why are they involving humans in recovery process yet again???

Did they not learn from the infamous 2012 case???

Leave it 100% to machines!!

Humans can be easily manipulated.
The fact that people are involved isn't what concerns me. What concerns me is that for this to work Aplle must retain the ability to access your account, meaning they can be obliged to access your account by the American government, and people hacking Apple can access your account too. This I bad news. Remember when Apple were promoting the fact that if the NSA asked for access to your account Apple were unable to comply even if they wanted to? Clearly this is no longer the case.
Score: 7 Votes (Like | Disagree)
jkbuster Avatar
127 months ago
Apple still refuses to use my Google Voice # for authentication purposes. Not real enough for Apple, but I use it daily. Ah well.
I'm guessing they take advantage of email -> text addresses provided by phone carriers. Unfortunately, Google has not made this available for Voice. I'd use it in a ton of places as well.

As for having the ability to have them to let you back into your account in case you're locked out, I hope that isn't a requirement for everyone. As someone who operates rather securely, if I screw something up and lock myself out, I want that data to be completely inaccessible. I do not want Apple retaining a secondary backup key to access my information; only I should have the key. Though, not everyone is comfortable with the potential loss of data, which is why it should be an opt-in feature.
Score: 3 Votes (Like | Disagree)
jclo Avatar
127 months ago
Hey Juli Clover,

Did you just post two different articles on macrumors.com that started with the same introduction?!

Recycling at its heights, journalism at its lows.
Those two posts were written simultaneously because they were interrelated and it was at a time when we were doing a million things at once. I didn't mean to word them exactly the same way though, so I apologize for that, and I've changed the beta post.

Sometimes when you write, you skip over whole words and phrases when you read it back to yourself and repetitive bits like that can go entirely under the radar. Sorry for the brain fart there.

By the way, if you see a typo or a title/phrase/word in a post that you have an issue with, you can email us and it'll get our attention faster. It sometimes it takes me awhile to get back to the comments on a post when it's busy. tips at macrumors.com or juli at macrumors.com.
Score: 3 Votes (Like | Disagree)
farewelwilliams Avatar
127 months ago
they need to relax on the rate limiting of attempted verification codes.

i called in on Apple Support, they told me to turn off icloud and turn it on. when turning back on, I needed to send a verification code. verification code never got send to my SMS or my Google Voice, never got pushed to my iPad, and then i tried my iPod touch but the verification process said I was attempting too many codes.
Score: 3 Votes (Like | Disagree)