Apple ups iCloud security with two-factor authentication

Posted on May 25, 2013 at 3:28 pm

Apple has added the option for two-factor authentication to its iCloud web services platform.

The company said in a post to its support site that users will now be able to voluntarily enable the security protections which combine the traditional username and password requirements with an additional four-digit randomly generated access code.

The platform will allow users to configure a trusted third device, such as a mobile phone, which will receive the code. Upon attempting to log in, users will give their name and passwords, then the code they received via SMS or Find My iPhone Notifications.

Apple is recommending that users enable the two-factor option in order to increase the security of their devices and prevent the loss of accounts due to password theft.

“Your Apple ID is the key to many important things you do with Apple, such as purchasing from the iTunes and App Stores, keeping personal information up-to-date across your devices with iCloud, and locating, locking, or wiping your devices,” Apple said.

“Two-step verification is a feature you can use to keep your Apple ID as secure as possible.”

Upon signing up, Apple said that it will also provide users with a 14-digit recovery code which can be used to reset the options should the user forget their password or lose their designated mobile device. Apple recommends that users print and store the code in a safe place.

The use of two-factor authentication has grown increasingly popular in recent years as cloud services and social networking sites have sought to provide additional protections beyond the username and password combinations which can often be guessed or obtained by hackers through phishing sites.

Companies including Facebook and Dropbox offer two-factor authentication options for users through mobile devices, while companies such as PayPal and Verisign have long-offered mobile and keyfob-based two-factor authentication to protect financial transactions.

Posted in Cloud Hosting