macOS · Accounts & Family
Manage two-factor authentication and trusted devices
Apple Account Security settings manage two-factor authentication, trusted phone numbers, trusted devices, and recovery options that protect sign-in to your Apple Account across all your devices.
How to open Apple Account Security
- Open System Settings → [Your Name] → Sign-In & Security
- Review Two-Factor Authentication status and trusted phone numbers
- Add or remove trusted devices as needed
- Set up a Recovery Key or Recovery Contact under advanced security options
What you should know
- List of trusted devices that can receive verification codes
- Trusted phone numbers for SMS or voice verification codes
- Generate app-specific passwords for third-party apps that need Apple Account access
- Account Recovery contact and Recovery Key setup for added protection
Why it matters
Your Apple Account is the key to iCloud data, purchase history, Find My, and iCloud Keychain, so its security settings are some of the highest-impact settings on the entire Mac. Two-factor authentication means a stolen password alone is not enough to access the account, since a code from a trusted device or phone number is also required, substantially reducing the risk of account takeover.
Best practices
- Keep at least one trusted phone number updated in case a trusted device is lost
- Set up a Recovery Key or Recovery Contact for added protection against account lockout
- Generate a unique app-specific password for each third-party app that requests Apple Account sign-in
- Review the trusted devices list periodically and remove devices you no longer own
Common problems and fixes
- Not receiving two-factor verification codes
- Confirm the trusted phone number is current and that the device has cellular or internet connectivity to receive SMS or push codes.
- Locked out after losing all trusted devices
- Use Account Recovery with a Recovery Key or Recovery Contact if one was set up in advance.
- A third-party app asks for the account password directly
- Generate and use an app-specific password instead of the primary account password for that app.
Tips and tricks
- Store a Recovery Key somewhere safe and offline rather than only in digital notes.
- Add a trusted phone number in a different country code if you travel frequently and switch SIMs.
Frequently asked questions
Can I turn off two-factor authentication?
For newer Apple Accounts it is required and cannot be disabled, since it is core to account security.
What is a Recovery Key used for?
It is an alternative 28-character code used to regain access to the account if normal recovery methods are unavailable.
Are app-specific passwords required for every third-party app?
Only for apps that do not support Sign in with Apple and need direct Apple Account access, such as some email clients.
Related settings
- Apple Account & iCloud SynciCloud settings control which of your apps and data — Photos, Mail, Contacts, Find My Mac, and more — stay in sync across all your Apple devices, plus your iCloud storage plan.
- Password & Sign-inThis settings area covers your Mac account password, Touch ID fingerprint enrollment, and AutoFill for passwords and passkeys saved in your keychain. It's where you change your login password and decide how quickly Touch ID or a password is required to unlock the Mac.
- iCloud KeychainiCloud Keychain securely stores and syncs passwords, passkeys, and payment information across your Apple devices using end-to-end encryption, and can autofill them in Safari and other apps.
More Accounts & Family guides for macOS
- Family SharingFamily Sharing links up to six Apple IDs into one group so everyone can share iCloud+ storage, App Store and iTunes purchases, and subscriptions like Apple Music, Apple TV+, and Apple Arcade — without sharing passwords. It also gives parents tools like Ask to Buy and Screen Time to manage what kids can access.
- Internet AccountsInternet Accounts is where you add non-Apple email, contacts, and calendar accounts — like Google, Microsoft Exchange, Yahoo, or a standard IMAP account — so they sync into Mail, Contacts, Calendar, and Notes. It's separate from your Apple ID and handles every other account you use on the Mac.
- Users & GroupsUsers & Groups lets you create additional accounts for other people who use this Mac, decide whether each one is an administrator or a standard user, and organize accounts into groups for permission purposes. It's the foundation for keeping multiple people's files and settings separate on a shared Mac.
- Screen TimeScreen Time shows how much time you or a child spend in apps and on websites, and lets you set app limits, downtime schedules, and content restrictions that sync across signed-in Apple devices.
- Game CenterGame Center settings control your public gaming profile, friends list, and social features like leaderboards and achievements that sync across Apple devices for supported games.
- Wallet & Apple PayWallet & Apple Pay settings let you add and manage credit, debit, and transit cards for use with Apple Pay on the web and in apps, and configure default cards and shipping information.