How To Setup Apple’s 2-Step Verification System

In my blog of June 1, 2014 I talked about a guy going by the name of Oleg Pliss taking iPhones hostage and demanding a ransom payment to unlock them. At the time I said “odds are you’d win the lottery before this happens to you.” Since I haven’t heard from anyone about this I’m going to assume that was correct. I also mentioned that iPhones who had setup Apple’s 2-Step Verification System were protected from this attack and it might be a good idea for iPhone owners to take this precaution.

2-Step Verification is simple and adds another layer of security to Apple ID’s

Your Apple ID, much like Google ID, is your user name for everything you do with Apple: Shop the iTunes Store, enable iCloud on all your devices, buy from the Apple Online Store, make a reservation at an Apple Retail Store, access the Apple Support website, and more. Your access to Apple is controlled by using a combination of your Apple User ID and a password. The 2-Step Verification System adds another layer of security between would be hackers and your Apple account.

Step 1. Visit the Apple ID Settings page and click Manage my Apple ID

Apple two-step verification requires you to verify your identity using one of your devices (i.e iPhone/iPad) before you can take any of these actions:

• Sign in to My Apple ID to manage your account
• Make an iTunes, App Store, or iBooks Store purchase from a new device
• Get Apple ID related support from Apple

When you set up two-step verification, you register one or more trusted devices (i.e. an iPhone and/or iPad). Apple will send a 4-digit verification code using either text messaging or Find My iPhone. Then, any time you sign in to manage your Apple ID at or make an iTunes, App Store, or iBooks Store purchase, you'll need to verify your identity by entering both your password and a 4-digit verification code.

Step 2. Click on Password and Security > Get started

How do I set up two-step verification?

1. Go to My Apple ID, select “Manage your Apple ID,” and sign in.
2. Select “Password and Security.”
3. Under Two-Step Verification, select Get Started and follow the onscreen instructions.

Step 3. This is just an Apple information page – click continue

Step 3 is where Apple simply explains exactly what two-step verification means to you and your account. You will also get a 14-digit Recovery Key for you to print and keep in a safe place. Use your Recovery Key to regain access to your account if you ever lose access to your devices (iPhone and iPad) or forget your password. Here’s a few points to note:

• Your security questions will no longer exist.
• You will be the only person able to request a password reset.
• You need to keep your Recovery Key in a safe place.

Without both your password and the verification code, access to your account will be denied.

Step 4. Add your iPhone number for text messages (SMS)

In Step 4 you’ll be asked to add devices to your account. You're required to add and verify at least one text message capable phone number for your account. Just click on the highlighted section and follow the prompts. You will also notice that under My Devices there is an option to “Set up Find My iPhone”. If you’ve already set this up on your iPhone and/or iPad just click “Refresh Devices” as Find My iPhone can be used to receive verification codes on any iOS device.

Step 5. Upon completion you will get a Recovery Key

You'll then be given your Recovery Key. This is extremely important. Write it down, print it out, or take a screenshot of it to ensure you don't lose it. Should you ever forget your password, or lose a registered device, your Recovery Key will always allow you access to your account. Just to make sure you know how important this key is, Apple makes you type it in on another new screen. And no, you can’t use copy and paste because I tried.

After dutifully following these instructions to save my Recovery Key because who knows what evil would befall me if I lost it, I then run across this:

If you lose your Recovery Key, you can replace it any time:

1. Go to My Apple ID, select “Manage your Apple ID,” and sign in with your password and trusted device.
2. Select “Password and Security.”
3. Under Recovery Key, select Replace Lost Key.

Really, Apple? What’s with all the warnings of doom if it doesn’t matter! Well, actually it does matter in the event that you lose access to 2 of the 3 items (i.e. password, iPhone/iPad, Recovery Key) at the same time. You could end up locked out of your Apple ID account permanently. That could never happen, right? It would take a real dummy to do that. Note to self: make sure Recovery Key is printed and safely stored in several secret hiding places around our home!

Two-step verification simplifies and strengthens the security of your account. After you turn it on, there is no way for anyone to access and manage your account at My Apple ID other than by using your password, verification codes sent to your trusted devices, or your Recovery Key. You must be responsible for:

• Remembering your password
• Keeping your trusted devices physically secure
• Keeping your Recovery Key in a safe place

One final note on setting up 2-Step Verification and it’s an important one for anyone who is going to do this. As a basic security measure, Apple doesn't allow setup of two-step verification to proceed if significant changes were recently made to your Apple ID account information. Significant changes can include a password reset or new security questions. As a result, you may be told that you will have to wait 2 or 3 days before you are able to complete the setup. That’s what happened to me.

This waiting period helps Apple make sure that you are the only person accessing or modifying your account. While you are in this waiting period, you can continue using your account as usual with all Apple services and stores. Apple will send an email to all the addresses you have on file notifying you of the waiting period and you’ll be able set up two-step verification after the date listed on your Apple ID account page and in the email that you receive.

Should you change your mind and decide you don’t like 2-Step Verification and would like to return to the old method can you do that? Yes and here’s how!

Thanks for visiting!