Apple has expanded its two-factor authentication (2FA) for iCloud and other services to 48 more countries, bringing...
the total to 59.
Anyone using the feature will be sent a temporary passcode in a text message to their mobile phone to enable them to access any Apple account or service.
This means that even if hackers are able to steal or guess usernames and passwords, they will not be able to access accounts without possessing the mobile phone linked to the account.
2FA also means users will not have to create or remember any security questions.
Hackers will also not be able to use the classic technique of requesting a password reset without possessing the mobile phone that provides the second factor of authentication.
Read more about 2FA
- Dropbox to implement two-factor authentication after security breach
- Limitations of two factor authentication (2FA) technology
- Bank of India’s 2FA with mutual authentication goes beyond OTPs
- Facebook and two-factor authentication (2FA) – for better or worse?
- Alternative authentication: New authentication methods for enterprises
However, users will have to enable this feature because it is not enabled by default.
Once the feature is turned on, the system will allow account changes only with the one-time password (OTP) or verification code sent to the phone.
Users will also be issued with a backup code in case they lose their mobile phone or are unable to receive the OTP because of a lack of coverage.
Countries where the 2FA service is available are listed on the Apple website.
The move to 2FA systems was led by PayPal and Google.
PayPal in the UK introduced the option of 2FA in 2009 in partnership with VeriSign to give users greater protection when making online purchase by using an OTP.
Google introduced a 2FA security feature for Google email accounts in 2011 after it announced two-factor authentication for its Google Apps customers the year before.