Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Why is Apple asking me to upload my root/admin password for my MacBook Pro in order to use iCloud? This should not be necessary

Why would Apple, Inc. need me to upload my MacBook Pro administrator (i.e. root) password -- from my Iphone -- in order to use iCloud services (calendar, notes, etc.)?


Not my iCloud password, my laptop administrator password!


I asked Apple phone support just now and they are telling their senior-level CSR's to say this is "for verification purposes only" and "this is a form of two-factor authentication".


Um, no...


Root passwords for physical machines are absolutely NOT required for two-factor authentication and claiming that this is necessary to "protect the user" is bogus. Sending root passwords around to 3rd parties also goes against (arguably, very obvious) IT security fundamentals.


This is like an ATM machine asking for your PIN and then asking you to drop off copies of your house keys "just to make sure it's really you"


I can see no legitimate reason for Apple -- or any vendor -- to request and store root passwords of its users' machines. There is already an Apple ID and password. Need more proof of identity? First, why? But if you must, then use challenge/response in a custom app. Use email. Use text messages. There are lots of viable methods available that do not ask the customer to engage in such egregious security practices.


I'm posting here to find an acceptable solution if one exists, and also to let others know about this issue as it seems to be new with a recent OS update.

MacBook Pro, iOS 11.2.6

Posted on Mar 15, 2018 10:48 AM

Reply

Similar questions

7 replies

There are no replies.

Why is Apple asking me to upload my root/admin password for my MacBook Pro in order to use iCloud? This should not be necessary

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.