Michael Mastro

Q: Apple ID Security on two computers

I updated to Yosemite on my work computer today; home was done a few months ago. When I got home there was a message...

 

apple-id_msg-capture.jpg

 

What good does it do to tell me this information, without giving me a option in case the "new Mac" is not mine? What am I supposed to do if I am not ok with my Apple ID being used on a new Mac? Who is the new Mac? How do I address this security violation?

MacBook Pro (15-inch Mid 2012), OS X Yosemite (10.10.3)

Posted on Jun 22, 2015 5:12 PM

Close

Q: Apple ID Security on two computers

  • All replies
  • Helpful answers

  • by James Brickley,

    James Brickley James Brickley Jun 22, 2015 5:23 PM in response to Michael Mastro
    Level 2 (259 points)
    Jun 22, 2015 5:23 PM in response to Michael Mastro

    At the very least you are notified a new Mac or iOS device was setup using your Apple ID. Two factor authentication is another way to enhance the security on your Apple ID account.  It can send you a text message on your cell phone with a code that you then have to enter in to validate your identity in addition to your password.  This way an attacker would not be able to get very far. 

     

    Setup two factor authentication on your Apple ID and change your password to a strong one password and do not re-use the password on other systems.

     

    Frequently asked questions about two-step verification for Apple ID - Apple Support

     

    Choosing good passwords in Mac OS X - Apple Support

     

    http://osxdaily.com/2012/08/08/test-password-strength-generate-strong-passwords- in-mac-os-x/

  • by etresoft,

    etresoft etresoft Jun 22, 2015 5:25 PM in response to Michael Mastro
    Level 7 (29,350 points)
    Mac OS X
    Jun 22, 2015 5:25 PM in response to Michael Mastro

    Hello MIchael Mastro,

    That message does give the name of the machine as "iMac". You can always give your machines more meaningful names like "Gozer" or "Zuul" if you want. With iCloud, depending on how you configure it, your data is shared on all machines. For example, you could erase your Safari browsing history on your phone and it will also be deleted on that iMac. In more extreme cases, you can use Back to My Mac to completely wipe the iMac, should you need to do that.

  • by James Brickley,

    James Brickley James Brickley Jun 22, 2015 5:31 PM in response to Michael Mastro
    Level 2 (259 points)
    Jun 22, 2015 5:31 PM in response to Michael Mastro

    You can also get these messages just logging into iCloud.com on another computer.  Its an attempt by Apple to notify you of activity.  If you were not expecting it then the action you take is to immediately change your password to a strong one and if you haven't turned on two factor authentication to do so. 

     

    If an attacker were to have comprised your email and your Apple ID they could have changed your password.  You might have to contact Apple support if you were locked out of your own account by an attacker.  Trust me, you don't want that to happen they could use your email to reset your passwords on other systems.  They could potentially grab your keychain if you sync it over iCloud and then compromise all the other systems you access. 

     

    So I highly recommended that you have a very strong password on your Apple ID and setup two factor authentication.  Do not reuse passwords for other systems because all it takes is one of them to be breached and then the first thing they will try is to use that same password elsewhere.