Can I access Apple Account without eSIM two-factor authentication?

There is no need - and in fact it’s discouraged - to setup your iPhone (your Trusted Device) as a “Trusted Number”.

2FA codes are already displayed on your trusted devices via data (not SMS).

Trusted Numbers are other numbers where you CAN receive the 2FA codes in the event that you loose access to all of your Trusted Devices.

The trusted numbers can be ANY voice or SMS-capable number virtually worldwide.

I’d suggest setting up at least 4x numbers in different regions if at all possible to guard against regional disasters in which you escape with only the shirt on your back.

(Earthquakes, fires, floods, hurricanes).

Family members can make a good, easy-to remember, and generally reachable choice.

Remember, it only needs to be a phone you can trust. e.g. “Hello Little Sister, you’re going to get a text from Apple shortly, please read-back the six digits to me when it arrives.”

See more detail here:

Get a verification code and sign in with two-factor authentication - Apple Support

To answer the rest of your question, you will ALWAYS have to contact your carrier to provision an eSIM onto a new device if you don’t have the “old” device+eSIM.

(or if your carrier simply doesn’t support “Quick Transfers”)

Some carriers may provide this capability via their online account management “self-service” tools.

rt266 wrote:

Hi,

I have 2 factor authentication enabled for my Apple account. Trusted phone number for 2FA codes is on the eSIM on my iPhone.

Lets assume that my iPhone is broken and I buy a new one. (no other trusted device or phone number exists)

How can I do the setup as my eSIM (to receive 2FA codes) is also lost in this situation?

My provider only supports eSIM and a new one has to be installed / requested through their app.

To be able to install the app if my provider I have to sign in to my Apple account, correct?

In this situation I can not sign in to my Apple account as I can not get the 2FA code.

I guess this situation can happen to everyone how only owns an iPhone and has only its phone number as 2FA number.

Am I wrong or is that a problem?

see if this archive link helps Two-step verification for Apple Account - Apple Support

and this one too Two-factor authentication for Apple Account - Apple Support

No Apple data is stored on an eSIM or even a physical SIM. Two factor is linked to the equipment that is signed into your Apple Account and to the trusted numbers you have provided. Presuming you are keeping your old telephone number, two factor will work on your new device as it did before. If you have changed your number, sign into Apple before you lose a way to get a code and then update your information (see below).

You should always have more than one trusted number, particularly if you do not won any other Apple equipment. If that device should get stolen you will end up having no way to get a two factor code and will then have to go through Account Recovery which can take some time,

The below is based on the section "About trusted phone numbers and trusted devices" in the article Two-factor authentication for Apple Account - Apple Support

To see, add, or change your trusted phone numbers use one of these methods:

● On your iPhone, iPad, or iPod touch: Go to Settings > your name > Sign-In & Security. Tap Two-Factor Authentication, tap Edit (above the list of trusted phone numbers), then enter your device passcode when prompted. Add or remove the number, then tap Done.

● On a Mac computer choose Apple menu  > System Settings (or System Preferences), then click your name (or Apple ID). Click Sign-In & Security, then add or remove a trusted phone number.

● Using a web browser:

1) Go to https://account.apple.com and sign in.

2) Follow Account Security options until you find one letting you change trusted numbers,

3) Click "+" to add a new number (you may be required to verify this number).

4) If you wish to remove an old number, click "-" next to the number.

Trusted numbers are the as-designed means to obtain your 2FA credentials w/o a trusted device in-hand.

If you know your Account Name (email) and password “COLD” … you’ll always be able to use trusted numbers to obtain a code to setup a new phone. (assuming that you choose your trusted numbers wisely)

A recovery key does NOT replace 2FA.

It merely takes all Account Recovery options away from Apple and places them on your shoulders alone.

You can’t setup a new phone (or any other new Trusted Device) w/o a 2FA verification code.