Understanding 2FA prompts on a single Apple device for an elderly user

Question

Level 1

9 points

Understanding 2FA prompts on a single Apple device for an elderly user

Looking for information about two factor authentication as currently implemented. Have an elderly friend with a single apple device who has never implemented two factor. They're growing tired of constantly being prompted to login using their credentials.

So, on average, if they implement 2fa, how often will they be prompted to enter their credentials? And how will it work with only a single apple device?

And what happens if they are prompted for 2fa, but are unable to complete the effort for a period of time, i.e. away from home, distracted by demands of the day.........

[Re-Titled by Moderator]

Posted on Feb 10, 2025 9:35 AM

Reply

Answer 1

Feb 10, 2025 9:57 AM in response to OXR

Good questions.

2FA protects the Apple Account, not the device.

Once it’s setup, the elderly user will rarely — if ever — need to use it again.

They’ll continue to access their phone or Mac just like they do today.

It’s only needed if attempting to access the Apple Account from an untrusted device.

For a single device user, trusted numbers (distinct and different from the trusted device) are an imperative to easily regain access to the Apple Account if the single trusted device is ever damaged, misplaced, or stolen.

These Trusted Numbers can be virtually any voice landline or sms capable mobile number; and should normally be the Friends and Family of the elderly individual — i.e. those who normally assist and “watch out for” that person.

Carefully read this for more details:

Two-factor authentication for Apple Account - Apple Support

Reply

Answer 2

OXR Author

Level 1

9 points

Feb 20, 2025 9:19 AM in response to Chattanoogan

So, I was able to enable 2fa on the ipad. They have a landline. Apple called their landline. WooHoo. Or so we thought.

They asked I add my cel phone as a trusted number, but we got an error stating, the number is associated with a different apple account which is true.

But, does that mean, the trusted number, can't be an apple user??? That seems odd.

On the flip side, I tried adding my landline as a trusted number to my own account, and could not complete the effort, as no code was received. I'm not sure of the difference between setting up a new appleid with 2fa as opposed to adding numbers to an existing account.

Is there a distinction between trusted number and recovery number that's not documented anywhere? And does this mean in future, they'll never get a call on their landline?

Worse, I see conflicting information, and have conflicting experience between the two accounts.

The experience doesn't match the documentation between these two test cases.

Please advise.

Reply

Answer 3

Feb 21, 2025 6:40 AM in response to OXR

A few thoughts:

1) Were you careful to correctly select “Voice” or “SMS” as appropriate when setting up the line. (i.e. Obviously selecting “SMS” on a landline isn’t going to work)

2) A single phone number can serve as a Trusted Number for multiple Apple Accounts.

3) To clarify: Were you trying to setup a Trusted Number within this “elderly” individual's Apple Account …

… a phone number which is already configured as a Recovery Contact for this same “elderly” individual’s Apple Account ?

Reply

Answer 4

OXR Author

Level 1

9 points

Feb 25, 2025 2:49 PM in response to Chattanoogan

1) Yes, I was actually surprised a landline got a call.

2) The error I got, stating the phone number was already associated with another apple account precluded adding it as a trusted number for this account. It's true, the cel number I was trying to add is associated with another account, I just didn't realized I couldn't add it to a 2nd.

3) Yes, the error mentioned above was trying to add a Trusted number to the senior's account.

4) The work around was to add an email associated with the offending phone number in item 2 as a Recovery Contact. Which worked. So I don't know why Apple permits reusing an email associated with another Apple account, but precludes reusing a cel number.

Reply

Answer 5

Feb 26, 2025 2:35 PM in response to OXR

Unfortunately, the cause of the behavior you’re experiencing re: Nr4 is unknown to me.

In our own immediate family (comprised of 2x “Apple Families”) we have amongst other devices:

3x iPhones on separate Apple Accounts each provisioned with MNO phone numbers; with each of the three serving as trusted numbers for two (2x) other Apple IDs

Additionally, we have a Google Voice number, not associated with ANY Apple Account; and it is serving as a trusted number for 4x Apple Accounts

We’ve had this setup in-place for a number of years; perhaps the “rules” have changed … ???

FWIW, all accounts have 2FA enabled; therefore they don’t have “Recovery Numbers” but rather “Notification eMails” … is that possibly the point of friction ? … don’t know … ??? 😕

Reply

Understanding 2FA prompts on a single Apple device for an elderly user

Similar questions