Apple adds two-step verification option for Apple IDs

ronjor · Mar 21, 2013

by Josh Lowensohn

Apple today added an extra layer of security to its Apple ID system that can harden the password people use to log in to various Apple services.

Users with an Apple ID can now sign up for two-step verification of their password, a system that sends a four-digit passcode by text message to a user's phone, and must be used on top of a regular password. In practice, this could keep an account from being compromised by an attacker, unless that person had access to the mobile device too.
Click to expand...

http://news.cnet.com/8301-13579_3-57575655-37/apple-adds-two-step-verification-option-for-apple-ids/

TheWindBringeth · Mar 22, 2013

Apple security hole: passwords can be reset with only email address and DOB

http://www.theverge.com/2013/3/22/4...e-id-passwords-reset-with-email-date-of-birth

Apple yesterday rolled out two-step verification, a security measure that promises to further shield Apple ID and iCloud accounts from being hijacked. Unfortunately, today a new exploit has been discovered that affects all customers who haven't yet enabled the new feature
...
Update: We've had a little more time to explore the hack and have yet more bad news to report. Yesterday a number of users were told they'd need to wait three days before enabling two-step verification. As a result, these accounts are fully vulnerable to the exploit. As of right now, the only surefire way these individuals can avoid the security threat is by changing their birthdate through Apple's account settings page.
Click to expand...

I'd suggest people factor potential privacy issues into their decision making process when it comes to choosing whether or not to enable 2-factor authentication. Setting DOB to something bogus in the distant past sounds like a wise choice to begin with, frankly.

Log in or Sign up

Apple adds two-step verification option for Apple IDs

ronjor Global Moderator

TheWindBringeth Registered Member

Log in or Sign up

Apple adds two-step verification option for Apple IDs

ronjor Global Moderator

TheWindBringeth Registered Member

Useful Searches