Last time I logged in to icloud.com, (some time ago); I was asked to enter my Apple ID, Apple Password and Apple Verification Code. This time I was only asked to enter my User Password. I did receive an email from Apple Support advising me “Your Apple ID (xxx…) was used to sign in to iCloud via a web browser”. Why am I no longer being asked to enter my Apple ID, Apple Password and Apple Verification Code?
iMac 21.5″, macOS 11.6
I think I understand trusted devices but am less clear on trusted browsers (which I believe relates to the original question). My experience has been that once a device is trusted it remains trusted until I remove it from my trusted devices. The same is not true, in my experience, for trusted browsers. I periodically need to re-enter a two-factor authentication code.
Two-factor authentication for Apple ID - Apple Support states:
When you sign in on the web, you can choose to trust your browser, so you won’t be asked for a verification code the next time you sign in from that computer.
It says "next time" but my experience has been that the browser remains trusted for quite a while and then again requires entry of the two-factor code. I haven't paid much attention to how long that is.
I did do some testing this morning and did find that if I delete all Apple cookies I am then required to enter a two-factor code the next time when logging into this forum or into www.icloud.com.
I think I understand trusted devices but am less clear on trusted browsers (which I believe relates to the original question). My experience has been that once a device is trusted it remains trusted until I remove it from my trusted devices. The same is not true, in my experience, for trusted browsers. I periodically need to re-enter a two-factor authentication code.
Two-factor authentication for Apple ID - Apple Support states:
When you sign in on the web, you can choose to trust your browser, so you won’t be asked for a verification code the next time you sign in from that computer.
It says "next time" but my experience has been that the browser remains trusted for quite a while and then again requires entry of the two-factor code. I haven't paid much attention to how long that is.
I did do some testing this morning and did find that if I delete all Apple cookies I am then required to enter a two-factor code the next time when logging into this forum or into www.icloud.com.
I tested using macOS 12.3.1 and the current Chrome browser. If I delete Apple cookies after signing into iCloud.com, I am required to enter a two-factor code the next time I log into iCloud.com or other Apple sites. If I don't delete Apple cookies I can repeatedly sign into iCloud.com without entering the two-factor code (for a lengthy period -- weeks).
When Mac and iPhone are signed in with same Apple ID and password on the same network , and trusted device is verified in 2FA account the code will appear .
When Mac is not synced with iPhone , when Apple ID and password is signed in with www.icloud.com it prompts to enter admin password as it verifies that correct account holder is signing in , however the trusted device is still verified in the account , a mail is received in apple mail application , stating first and last name and date , that is authentic .
The Mac is searched using IP address as fine my Mac , and location services is turned as on .
Note : it has no connection with cookies , even you try with private browsing enabled in Mac / iPhone the same procedure will be followed , 2FA account is created from hard ware address of the device .
For latest version if you click on trust this browser , it will not ask the code next time Two-factor authentication for Apple ID - Apple Support
See the section - How it works.
When logging into www.icloud.com I get an option to trust the browser or device that I am logging in with and if I click that option then I am not asked for the two-factor code again for quite some time (several weeks) -- but I don't get an email notification when signing in without the code during that time.
However Apple enforces an even higher security level when logging into https://appleid.apple.com/ -- that requires a two-factor code every time.
The first two screen shots are when private browsing is enabled , the trusted devices are verified , but its from a single Mac in which no other devices iPhone / iPad are synced .
It prompts to enter admin password , from this forum website or from www.icloud.com
When private browsing is disabled from safari preferences and set as new window , and again signed in with credentials at www.icloud.com the same admin password is required , if I click on cancel an empty field appears , type Apple ID the password is automatically filled up as iCloud Keychain was set up and in safari preferences > password section the Apple ID address and its password is saved previously ( autofill feature had already filled up the password in keychain access ) .
After that a map window appears > click on don't allow > don't change Apple ID password > the verification field appears , the code is not displayed as Mac is not synced with iPhone , click on use iPhone , the numbers are shown click on desired one the code goes to it .
So my opinion is even you clear all history and website data or if its connected with cookies the sign in method works in its own way
When you sign in on the web, you can choose to trust your browser, so you won’t be asked for a verification code the next time you sign in from that computer.
This feature works with latest models of Mac and with latest versions .
I've never done that but you may want to trying clearing cookies to see if that does it.
How can I change the option from trust to not trust the browser or device that I am logging in with?
iCloud.com and 2FA
