How to Turn On Two Factor Authentication for Apple Account (2026)

Turning on two-factor authentication for your Apple Account takes about two minutes: on an iPhone or iPad open Settings, tap your name at the top, tap Sign-In & Security, then tap Turn On Two-Factor Authentication and type in the six-digit code Apple sends you. On a Mac the same toggle sits in System Settings under your name, and if you have no Apple device handy you can switch it on at account.apple.com. Below is how to turn on two factor authentication for Apple Account on each platform, plus what to do when the option is missing or the code never shows up.

One naming note before you start, because it trips up a lot of people reading older guides. Apple renamed Apple ID to Apple Account, and Password & Security to Sign-In & Security. If a tutorial tells you to look for Password & Security and you cannot find it, you are on a current version of iOS, iPadOS or macOS, and the row has simply moved.

What You Need

You need three things, and all three should be in your hands before you start.

First, your Apple Account password. If you have forgotten it, reset it at account.apple.com before you begin, because the setup flow asks for it partway through. Second, a trusted Apple device: an iPhone, iPad, or Mac that you are already signed in to. Turning two-factor authentication on from the Settings app on a device you no longer have access to is not possible, which is why the web route below exists.

Third, a phone number that can receive a text message or an automated phone call. It does not have to be an iPhone number and it does not have to be your current number, but you have to be able to read the code when it arrives. Forum threads on r/applehelp and the Apple Community boards repeatedly show people failing at this last step because the number on file is one they stopped using years ago.

One thing to know before you tap Continue: for accounts created with two-factor authentication already switched on, Apple will not let you remove it later. Some features in recent versions of iOS and macOS also require it. If you turn it on and immediately change your mind, you have a short window to lower your account security before that option disappears.

Step-by-Step: How to Turn On Two Factor Authentication for Apple Account

The setting lives in the same place on every Apple platform, only the surrounding menus differ. Here is the short version for reference while you follow the detailed steps below.

Device or platformMenu pathWhere the code arrives
iPhone or iPadSettings, your name, Sign-In & Security, Turn On Two-Factor AuthenticationTrusted device notification, or text message or automated call
MacSystem Settings, your name, Sign-In & Security, Turn On Two-Factor AuthenticationTrusted device notification, or text message or automated call
Web browseraccount.apple.com, Sign-In & Security, Turn On Two-Factor AuthenticationText message or automated call to your trusted phone number

How to turn on two factor authentication for Apple Account on iPhone and iPad

  1. Open the Settings app.
  2. Tap your name at the very top of the list. It appears above Wi-Fi, Bluetooth, and Notifications.
  3. Scroll down and tap Sign-In & Security.
  4. Tap Turn On Two-Factor Authentication. It sits in the Security section, directly above the Change Password row.
  5. Tap Continue on the confirmation screen.
  6. Tap Use Phone Number, enter a number you control, and tap Continue.
  7. Type the six-digit verification code Apple sends, then tap Continue.

After the last Continue, a small padlock-style icon appears next to certain Apple services in the settings list, and the Two-Factor Authentication row reads as on. That is how you know it worked. You can also confirm it any time in Settings under your name at the very top, where 2FA is marked as active.

Open Apple Account settings on your device

Before you change anything, look at what you already have. Open Settings and the first row below the search box is your name, in blue text, with your Apple Account details underneath it. Tap it and you land on an Apple Account screen showing your name, email address or phone number, and any media and purchases you share with Family Sharing.

On current iPhone and iPad versions, Sign-In & Security is a row about halfway down that screen. It replaced Password & Security, so if a guide sends you looking for the old name, scroll a little further than you expect to. Older versions of iOS put this under iCloud instead, which is another reason screenshots from a decade ago send people in circles.

What you want to check on this screen before continuing is whether your phone number is current. If it shows a number you have not used in a while, update it now, while you still have unrestricted access.

How to turn on two factor authentication for Apple Account on Mac

  1. Open System Settings from the Apple menu bar.
  2. Click your name at the top of the sidebar.
  3. Select Sign-In & Security.
  4. Click Turn On Two-Factor Authentication.
  5. Follow the on-screen prompts and enter the verification code when the six-digit field appears.

The success indicator is the same one you see on iPhone: the row in System Settings shows two-factor authentication as active. Your Mac then becomes a trusted device, so it can approve future sign-in requests from other devices without a code.

If your Mac is running an older version of macOS, look for Preferences instead of System Settings, and for Password & Security instead of Sign-In & Security. Updating the Mac is the tidier fix, but the old path still works on the versions that support it.

Turn on two-factor authentication at Account.apple.com

Sign in at account.apple.com from any browser, including Chrome on Android or Windows, then open Sign-In & Security in the sidebar and select Turn On Two-Factor Authentication. Apple verifies it by sending a six-digit code to your trusted phone number, which you enter on the same page.

This is the route to use if you never owned an iPhone, or if your iPhone is broken, lost, or running a version you cannot get into. A non-iPhone number works fine as a trusted phone number; people on Android-only phones run their Apple Account this way every day.

One limit worth knowing: if you have never set a trusted phone number or have no trusted device at all, the web page may not offer the option. You then have to verify through Apple’s account recovery process at iforgot.apple.com, which takes longer and asks for personal details and billing information.

Complete and verify the security-code check

The code is six digits and it expires quickly. It arrives in one of three ways: as a push notification on a device you already trust, where you tap Allow rather than type anything; as an automatic text message; or as an automated phone call where you read the digits out loud. Push notification is the fastest of the three and the one least likely to be delayed by a carrier.

Never give that code to anyone. Apple support will not ask for it, and no legitimate person needs it. If a text message asking for your code shows up while you did not sign in anywhere, someone has your password and is waiting for you to finish their login.

When the code is accepted, the setup screen confirms that two-factor authentication is on. I like to reopen Settings afterward and check the row reads as active, because it costs two seconds and it is the difference between thinking you are protected and knowing it.

Review trusted devices and account recovery information

Open Settings, tap your name, then Sign-In & Security. The Allow Apple to request a verification code to menu is your trusted phone number; Trusted Devices lists every iPhone, iPad, Mac, and Apple Watch that can receive sign-in requests. Remove anything you have sold, given away, or lost. Old entries are harmless day to day but they are a standing risk if the device changes hands.

Confirm that your account has a recovery email address you actually read. Under Sign-In & Security, the Password section shows it, and an incorrect entry there is a common reason recovery stalls later. Update it if it points at an address you closed years ago.

Two more things live in the same area. App-specific passwords are for third-party email clients and apps that cannot handle a six-digit code; generate one per app under App-Specific Passwords instead of handing over your real password. And if you enrolled less than two weeks ago, you may still see an option to lower your account security. After that window closes, it is gone, and that is the part that surprises people most.

Common Mistakes

You are looking for Password & Security

That row was renamed. On a current device it reads Sign-In & Security, and if the toggle under it is missing you may be scrolled past it or signed out of iCloud. One more possibility: on a Mac, System Settings has to be open, not the older Preferences window.

The option says your account does not support two-factor authentication

This is the error people search for most and no major guide explains it. It usually means the account was created through Sign in with Apple or another service that hands over an already-verified account without a full Apple Account password. Those accounts have nothing to upgrade.

The fix is to finish setting up the account fully: complete the iCloud setup on an iPhone or Mac, or set a trusted phone number through the web flow, then check Sign-In & Security again. School and work managed accounts behave differently too; the toggle is often locked because an administrator controls the security level.

The six-digit code never arrives

Check the number on file first, since a stale number is the usual culprit. Then ask for the code again using Did not get a verification code? on the sign-in screen, which resends it by text and offers an automated call instead. Carrier filtering and full message queues do delay these codes, and the automated call frequently succeeds where the text does not.

If codes keep failing, sign in on a trusted device instead. You can manage the trusted phone number from there without waiting on a code at all.

The code is rejected

Codes expire in a few minutes. Enter the newest one and watch for typos: readers frequently swap digits or paste a code with a space in it. If the code was sent to the wrong number, you will see the entry field for the number in the same screen, and you can correct it before moving on.

You replaced your phone

This is the single biggest source of panic on the forums, and it is fixable. If another trusted device exists, use it: sign in, go to your name, Sign-In & Security, and update the trusted phone number before adding anything new. If no trusted device is left, use account.apple.com from any browser, or start recovery at iforgot.apple.com.

With no trusted device and no old number, expect a waiting period and a support conversation. Set up recovery on your Mac or your old phone before trading it in next time; it takes two minutes and saves the whole mess.

You think the code replaces your password

It does not. Two-factor authentication means your password plus a code, and neither one works alone. That also means the Forget Password option on a sign-in screen will not help if you have lost your phone, since resetting the password still leaves you needing a way to receive the code.

Frequently Asked Questions

Can I turn off two-factor authentication after enabling it for my Apple Account?

Usually not. If your Apple Account was created with two-factor authentication already on, Apple does not allow it to be removed. If you turned it on yourself, you have roughly two weeks to lower your account security from Sign-In and Security before that option disappears. Either way, certain features in recent iOS and macOS versions now require two-factor authentication.

What should I do if I no longer have access to a trusted device?

Sign in at account.apple.com from any browser and open Sign-In and Security. If the session is already authenticated, you can update your trusted phone number and remove or add devices from there. If you cannot sign in, start at iforgot.apple.com. With no trusted device and no working phone number, expect an identity check and a longer recovery process.

Why am I not receiving the Apple verification code by text message or phone call?

Check that the number on file in Sign-In and Security is one you actually control, since a stale number is the most common reason. On the sign-in screen tap Did not get a verification code? to resend by text or switch to an automated call. Carriers do delay these messages, and the automated call often gets through when the text does not.

Does changing my Apple Account password turn off two-factor authentication?

No. Changing your password does not disable two-factor authentication, and the two settings are managed separately. Changing a password will, however, sign your other devices out, which means each one needs a fresh code the next time you sign in. Update your trusted phone number separately if you have a new number.

Is two-factor authentication the same as forgetting my Apple Account password?

No, they solve different problems. Two-factor authentication is a security feature that adds a six-digit code to your password at sign-in. Forgotten password is a recovery tool for when you cannot remember your password in the first place. Resetting your password does not skip the code check, which is why losing your phone still needs another route in.

What should I do if I lose my phone after turning on two-factor authentication?

Use any remaining trusted device: an iPad, Mac, or Apple Watch can approve the sign-in and lets you update your trusted phone number under Sign-In and Security. With nothing left, sign in at account.apple.com and change the number there. If that fails too, begin recovery at iforgot.apple.com and expect an identity verification step.

Conclusion

Start on a device you can actually get into. Open Apple Account settings on your trusted iPhone, iPad, or Mac, tap Sign-In & Security, and turn two-factor authentication on there rather than on the web, because doing it on a device also makes that device trusted. Complete the six-digit code check immediately, confirm the row reads as active, and only then sign in somewhere else.

Before you close the settings app, glance at your trusted phone number and your recovery email. Two minutes of that now is the difference between a five-minute fix and a recovery request later.

Leave a Comment