Two-Step verification on the same device??!

This happened to me as well. My guess is that your mac is the only trusted device at the moment, so the only option for apple is to send the code there.

If you go to ibutt settings in system preferences, and click account details, you can see what devices are trusted under the device tab. For me, it says my iphone is not usable as a trusted device, and I haven't bothered to see if I can change that yet, but I imagine it is doable somehow.

Edit: I just came across a thread discussing the same thing, and found this answer, which solved the issue for me: Re: Why did Apple show the two-factor authentication code on the same device I was logging in with?

Two-factor authentication is not protecting your Mac. It is protecting your AppleID login.

Apple has a list of your known (trusted) devices in your AppleID account. It sends the code to those devices. If you lose one of those devices, you need to log into AppleID and remove the device.

As far as a "new device" is concerned, the browser you are using on your Mac is a "device." So, if you switch browsers, or the identification data used to determine if it is the same browser is lost, then when you try to log in, you have a "new device" even though it is the same old Mac you've been using.

There are three ways you can authenticate, what you know (passwords, PINs), what you have (your iPhone, a Token card or USB), and what you are (biometrics).

Two-factor Authentication uses two of those three things to ensure it is you who is unlocking your AppleID account, not unlocking your Mac.

I still do not understand where the security feature is if I am getting the code in the same device where I am requested to write it...

You are accessing iCloud. And Apple is sending a verification request to a device that you own and registered as your trusted device, that is currently online and close to you. Only you should be sitting in front of your own Mac and have access to it. That is why you can access your AppleID account if you can enter the digits on a trusted device.

I am very glad that Apple is not insisting to send the verification request only to my iPhone but right to the computer where I am sitting. This way I do not have to try to find my iPhone and to charge it, whenever I need to verify my identity.

You normally see the code on your Mac when the other device in the two step verification is connected to the Mac via "Continuity." Is your iPhone or iPad using the same Apple ID as your Mac? If so the code may actually be appearing on your other device and that device is sharing it with your Mac.

See this list:

System requirements for Continuity on Mac, iPhone, iPad, iPod touch, and Apple Watch - Apple Support

https://support.apple.com/en-us/HT204689

Jet787 wrote:

Tnxs but I am confused and I tell you why: if two-factor authentication is protecting my AppleID login, how can be considered protected if I am getting the 6 letter code on the same device where I am asked to type it?

Because it is one of your trusted devices. If you no longer trust that device, remove it from the list of devices.

If you let anyone use your Mac, and you give them your AppleID password (or use a simple one that you use on every other website on the internet), then you have no security.

Your AppleID is protected because someone would have to both steal your Apple device and your AppleID password. If they only steal your Mac, but don't have your password, they can't log in.