IdrisSeabright wrote:
Never give anyone else access to your personal Apple ID. Never store personal information on a work Apple ID.
Seems like this goes against the common advice I've been reading here, which is to enter in a friend or family member's phone number as an alternate trusted device. This seems like a horrible way to keep things secure, given that you don't know how careful other people (even trusted people) are with their own security. There was recently a paper published from Princeton security researchers that demonstrated how easy it is to hijack someone else's phone number in the US. I would love to enable 2FA on my account for improved security, but I'm extremely uncomfortable with the fact that I have no reasonable backup access that's purely in my control (e.g. how google lets you print out a page of backup keys).
I know I can designate my mac as a trusted device, but that seems extremely shaky given that it's based on saving browser cookies when I access iCloud.com. As far as I can tell, the only way to have a backup 2FA method that's completely in my control is to buy a backup iphone.
My day job is cloud security, and as far as I can tell, Apple's story on iCloud 2FA is a combination of really strong security with very little attention paid to how it can practically be used in a safe and secure manner.
For this reason, I prefer to turn it off, and I think everyone should have that choice. That is what all the outrage in this thread is about. People didn't know what they were getting themselves into, because there are places in the iPhone/iCloud user interface which tell you it's required (e.g. if you want to sync iMessages to iCloud), and they don't tell you the consequences of turning it on. I myself am quite security conscious, so when I was told I needed to turn it on to sync iMessages, I thought "well of course 2FA is an improvement" and went ahead. However, when I realized this effectively blocks my ability to ever use Find My iPhone (I don't have another trusted phone number and my mac browser cookies are not reliable as a backup for something so critical), I decided that was a step too far and decided to go back to normal password auth for iCloud. It was quite a shock to learn that that's impossible. I did get lucky and change my mind before 14 days was up, but the restriction is just silly. If I hadn't made the 14 day cutoff, I would have just created a whole new iCloud account and taken the hassle of transferring everything over to it, so what's the point of forcing me to do that?