why can you remove all keys without providing a key?

I added two security keys and in the documentation it says you need one of the keys to remove a key. But you are able to remove all keys without providing any key

Posted on Mar 21, 2023 12:28 PM

Reply
Question marked as Top-ranking reply

Posted on Mar 23, 2023 12:49 PM

_philip_h,


Thanks for your response! If you look back up at the quoted text, you'll see this specific line:


When you use Security Keys for Apple ID, you need a trusted device or a security key


Note that it says you can use either a security key or a trusted device to add a key or remove a key. You do not need both, and since your iPhone is a trusted device, it is expected that it would be able to add or remove a security key.


Take care!


5 replies
Question marked as Top-ranking reply

Mar 23, 2023 12:49 PM in response to _philip_h

_philip_h,


Thanks for your response! If you look back up at the quoted text, you'll see this specific line:


When you use Security Keys for Apple ID, you need a trusted device or a security key


Note that it says you can use either a security key or a trusted device to add a key or remove a key. You do not need both, and since your iPhone is a trusted device, it is expected that it would be able to add or remove a security key.


Take care!


Mar 26, 2023 1:02 PM in response to joe_g78

The response form Apple only shows the power of the passcode, which from what I've read is supposed to be a weak form of 2FA. I understand about the trusted device, but what if your trusted device is taken from you. You will probably say they don't have the passcode, so you're good. I say you REALLY need to read this article.


https://9to5mac.com/2023/02/24/iphone-passcode-in-public-dangers/


You should not be able to remove security keys without a security key. I switched to keys because I thought they had the power to secure. But it looks as though everything that the keys secure, the passcode can open.

Mar 22, 2023 12:56 PM in response to _philip_h

Hello _philip_h,


Thank you for reaching out to Apple Support Communities, and we'll be happy to help in any way we can. We understand you have questions about Security Keys. To remove a Security key as stated in the article at the top of the page:


"Use Security Keys for Apple ID

When you use Security Keys for Apple ID, you need a trusted device or a security key to:

  • Sign in with your Apple ID on a new device or on the web
  • Reset your Apple ID password or unlock your Apple ID
  • Add additional security keys or remove a security key


Keep your security keys in a safe place, and consider keeping a security key in more than one place. For example, keep one key at home and one key at work. If you're traveling, you might want to leave one of your security keys at home."



We hope this helps.


Cheers!

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

why can you remove all keys without providing a key?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.