Apple offers an improved security method called two-factor authentication that’s designed to ensure that you’re the only person who can access your account, even if someone else knows your password. When you enter your Apple ID and password for the first time on a new device, we’ll ask you to verify your identity with a six-digit verification code. This code is displayed automatically on your other devices, or sent to a phone number you trust. Just enter the code to sign in and access your account on the new device. Never share your password or verification code with anyone else.
Two-factor authentication is built directly into iOS, macOS, tvOS, watchOS, and Apple’s web sites. It's currently available to iCloud users with at least one device that's using iOS 9 or OS X El Capitan or later and is the default security method for some new Apple IDs created on iOS 10.3 or macOS 10.12.4.
Two-factor authentication is required in order to use certain features that require improved security.
If two-factor authentication isn't available for your account, Apple also offers an older security enhancement called two-step verification. Two-step verification requires you to verify your identity using a four-digit code sent to one of your devices before you can make changes to your Apple ID account information, sign in to iCloud, or make an iTunes, App, or iBooks Store purchase from a new device.
All web pages where you can view or change your Apple ID use Secure Sockets Layer (SSL) to protect your privacy. In Safari, look for
in your browser when accessing your account at your Apple ID account page to know your session is fully encrypted and secure.