Steve Zodiac

Q: Two-stage verification enigma.

Hi all.

 

I upgraded my mid-2010 MacBook Pro to MacOS Sierra on 21st September, and then I re-installed Sierra on Friday to try and sort out a bug I had under guidance from Applecare.

 

During that re-install I decided to agree to switch on the two-stage iCloud verification system.

 

I then discovered another bug, with Photos for Mac as it happens, and I wanted to post a question in these communities about that. So I signed-in using my Apple ID on the MacBook Pro that I'm typing on now, and which I've had since December 2010.

 

Not unexpectedly, since I'd switched it on, I got a message on the screen telling me that two-stage verification was required, but it also said that my Apple ID had been used to sign in from a 'new device', rather than one I'd owned for six years.

 

I unlocked my iPhone to see the verification code I had been sent, but nothing had arrived. And then I realised that the verification code had been sent to my MacBook Pro, the device I'd just used to sign in with.

 

Sure enough, when I entered the code that I had received in one message box on my MacBook Pro screen into the spaces in another message box on my MacBook Pro screen, I was signed in and able to post in the community.

 

But what is the point of sending the verification code for two-stage verification to the same device being used to sign in with? Surely something is wrong here?

Posted on Oct 2, 2016 9:38 AM

Close

Q: Two-stage verification enigma.

  • All replies
  • Helpful answers

  • by zinacef,Helpful

    zinacef zinacef Oct 2, 2016 11:51 AM in response to Steve Zodiac
    Level 5 (5,299 points)
    Applications
    Oct 2, 2016 11:51 AM in response to Steve Zodiac

    I'm wondering if that Mac is listed as a trusted device?  Go to iCloud.com > Settings and see what are your list of trusted devices there.

     

    Frequently asked questions about two-step verification for Apple ID - Apple Support

  • by Drew Reece,Helpful

    Drew Reece Drew Reece Oct 2, 2016 11:52 AM in response to Steve Zodiac
    Level 5 (7,741 points)
    Notebooks
    Oct 2, 2016 11:52 AM in response to Steve Zodiac

    I suspect zinacef is correct & your Mac is a trusted device. Add or edit them in your Apple account

    Apple ID account page

     

    To make these features secure you really need to enable good passwords on the user accounts (or login screen on iOS). Also enable screen locking if you leave the devices unattended in public/ work or untrusted places check that the notifications do not appear on the lock screen too

  • by Steve Zodiac,

    Steve Zodiac Steve Zodiac Oct 2, 2016 11:53 AM in response to zinacef
    Level 1 (21 points)
    Mac OS X
    Oct 2, 2016 11:53 AM in response to zinacef

    Thanks zinacef.

     

    I have been to icloud.com and signed in using my old MacBook Pro. Again I got a warning telling me that someone was trying to sign in on a 'new' device, and again it sent the 2nd stage verification code to that same device.

     

    My MacBook Pro is listed as a trusted device on iCloud, as is my iPhone. That is correct as far as I am concerned.

     

    My point is that iCloud has now started referring to my MacBook Pro as a 'new' device, even though a) it isn't new, and b) it is listed in iCloud as trusted.

     

    And, at the same time as thinking it is a 'new' device, it is still sending the second stage verification code to it.

     

    This doesn't make sense to me, anyway.

     

    Surely it ought to send the verification code to any device other than the one being used with my Apple ID to access iCloud, (ie. to my iPhone in this instance), and not to the very same one.

     

    It is like iCloud thinks my MacBook Pro is both trusted and new at the same time, which can't be right, can it?

     

    It's certainly confusing me enough to make me think about ditching the two-stage verification. Indeed, the mounting number of snags and glitches I'm experiencing since getting Sierra is making me think seriously of going back to El Capitan...

  • by zinacef,

    zinacef zinacef Oct 2, 2016 11:57 AM in response to Steve Zodiac
    Level 5 (5,299 points)
    Applications
    Oct 2, 2016 11:57 AM in response to Steve Zodiac

    Yeah, I agree, it doesn't make sense.  Try signing out of iCloud and signing back in to see if that might help.  Another silly question from me - have you verified all your trusted devices on the list?  I know it has a little verify icon next to them.

  • by Steve Zodiac,

    Steve Zodiac Steve Zodiac Oct 2, 2016 12:10 PM in response to zinacef
    Level 1 (21 points)
    Mac OS X
    Oct 2, 2016 12:10 PM in response to zinacef

    Hmmm...

     

    I'd kind of assumed that when a device was listed in iCloud.com > Settings that it implied that it was 'trusted'.

     

    I have to admit that there isn't actually the word 'trusted' next to either of mine, but when I go into them on the page it says that I am signed in and running the necessary software versions on both my MacBook Pro and my iPhone, and the last bits of the serial numbers shown are correct.

     

    There doesn't seem to be a button anywhere on the page to mark them as 'trusted', or indeed to verify them.

     

    Or am I being dumb and looking in the wrong place?

     

    (Regarding signing out of iCloud, am I correct to assume you mean via System Prefs on my Mac?)

  • by Drew Reece,Solvedanswer

    Drew Reece Drew Reece Oct 2, 2016 12:26 PM in response to Steve Zodiac
    Level 5 (7,741 points)
    Notebooks
    Oct 2, 2016 12:26 PM in response to Steve Zodiac

    You manage this in your AppleID not iCloud.com.

    https://appleid.apple.com

     

    The security section will list the trusted devices & phone numbers.

     

    If you think you are seeing a bug report it to Apple but I think the new device messages may be normal (if the emails list different features such as FaceTime, Messages, Apple ID account management etc).

    http://apple.com/feedback/

     

    iCloud has always nagged, provided you know what to do when you didn't trigger a warning you should be fine – Just go directly to the Apple ID page if you didn't expect to get one of these warnings, avoid following the links incase they are phishing attempts.

     

    I'm not sure it was any better on earlier OS's isn't just how Apple make stuff these days?

  • by Steve Zodiac,

    Steve Zodiac Steve Zodiac Oct 2, 2016 12:36 PM in response to Drew Reece
    Level 1 (21 points)
    Mac OS X
    Oct 2, 2016 12:36 PM in response to Drew Reece

    Thanks Drew.

     

    Yes, I realised I was looking at the wrong page when I went into iCloud via System Preferences on my Mac, and there it does say that my MacBook Pro is 'trusted'.

     

    It also answers my question too, in a way, because it showed my iPhone as being 'unable to accept verification codes'. It didn't actually say why, but I'm thinking that this will be because I hadn't turned on two-factor verification on on my iPhone? (It never dawned on me that they both had to have two-factor enabled separately. Doh!)

     

    Anyway, I've been onto the correct webpage for Apple ID management now, and I've turned two-factor back off on my Mac as well now, so I won't be bothered with it any more.

     

    Thanks for all your help.

  • by Drew Reece,

    Drew Reece Drew Reece Oct 2, 2016 12:51 PM in response to Steve Zodiac
    Level 5 (7,741 points)
    Notebooks
    Oct 2, 2016 12:51 PM in response to Steve Zodiac

    I'm glad you are getting to grips with it

     

    Good luck,

    D

  • by LACAllen,

    LACAllen LACAllen Oct 2, 2016 1:31 PM in response to Steve Zodiac
    Level 5 (5,408 points)
    iCloud
    Oct 2, 2016 1:31 PM in response to Steve Zodiac

    Steve Zodiac wrote:

     

    but I'm thinking that this will be because I hadn't turned on two-factor verification on on my iPhone? (It never dawned on me that they both had to have two-factor enabled separately. Doh!)

     

    There is no "turning two factor authentication" on for your phone.

     

    There is making your phone a trusted device.

    Screen Shot 2016-10-02 at 4.29.34 PM.png

     

    The extra security is for your Apple ID, not your phone.