About this tool
Weighted 15-step checklist for Apple Account two-factor auth, trusted numbers, recovery contacts, Stolen Device and Advanced Data Protection.
This guide is a weighted, 15-control checklist for an Apple Account: two-factor authentication, a passcode strong enough to guard the device that receives the codes, two trusted phone numbers, a recovery contact, Stolen Device Protection and a deliberate decision on Advanced Data Protection. Apple locks out permanently when every recovery path is gone, so recovery controls are scored as heavily as sign-in ones, and four controls are marked critical: the score stays at 69% until all four are done. Apple ID and Apple Account are the same thing under two names.
Open Apple ID 2FA Setup Guide on AltFTool — it loads instantly in your browser.
Add your input to the workspace.
Adjust the options until the result looks right.
Copy or download the output and put it to work.
Trusted numbers and a recovery contact carry critical weight because an Apple lockout has no support workaround.
Recovery Key and Advanced Data Protection both remove Apple's ability to help you, and the checklist says so before you enable them.
The page never asks for your Apple Account, password or a verification code, and stores no data about your account.
On iPhone or iPad go to Settings, tap your name, then Sign-In & Security > Two-Factor Authentication and turn it on. On a Mac use System Settings > your Apple Account > Sign-In & Security. Apple Accounts created in recent years have it enabled by default, so you may find it is already on.
Only for a short window. If you have just enabled it, Apple emails you a link to unenrol and that link stays valid for two weeks; after that the setting is permanent. Newer accounts require two-factor authentication from creation and cannot switch it off at all.
It is a 28-character code you generate yourself that replaces Apple-assisted account recovery. It stops anyone talking Apple Support into resetting your account, but if you lose the key and all your trusted devices, nobody including Apple can restore access. Most people are better served by a recovery contact.
No. Apple does not contact customers to ask for a verification code, an account password or remote access to a device, so any such call, message or email is a scam. Hang up, then check the account yourself at account.apple.com rather than through a link you were sent.