How to turn off two factor authentication?

Father of Apple Kids wrote:

There is no screen time section in my settings. It use to be the Settings/ General area but it is not there anymore.

That's correct. It's exactly where Lawrence told you it is: Settings>Screen Time

Father of Apple Kids wrote:

There is no screen time section in my settings. It use to be the Settings/ General area but it is not there anymore.

[Edited by Moderator]

Screen Time is in Settings, right above General. The same place it's been for over a year.

As someone who travels for a living, I entirely switched to another phone maker. Apple apparently expects its customers to always be in ideal situations where everything is just a step away. Unfortunately, Apple is obviously oblivious to the rest of the world and how it works. It's employees live in high-end condos surrounded by a million-and-one cell towers and blazing internet speeds. It's no surprise Apple has such a small customer base compared to companies that actually care about what their customers want. Sure, maybe other companies might sell my browsing information, but even if that's the case, at least I can actually USE the device I bought!

Your post is truly laughable; there’s hardly anything true in it. You don’t have to be in ideal situations. I also travel a lot, and 2FA has never been in the way. And it’s precisely because Apple is not oblivious to the rest of the world and its real risks that it requires 2FA to protect its customer’s data regardless of where they go virtually and physically.

And, BTW, apple hardly has a small customer base with 1.5 BILLION phones sold, and it’s considered to be the world’s most successful company.

But you should always get the product that best meets your needs and prejudices. enjoy whatever device you choose.

I get your point. This is the same concern I have.

Locking down a MOBILE PHONE to 2FA everywhere in the world is bad idea.

Since Apple developers believes to know everything user wants and needs, here is an idea for you smart idea. Use location service to 2FA on and off.

Cardinal rule of Information Security happens, an application should be available to user securely whenever and wherever the user needs it.

I'm a user, and I am grateful that Apple is protecting my Apple ID. As I posted earlier, any Apple ID (or any ID on any site) can be easily hacked unless it has 2 factor authentication, thanks to the hack of Equifax and many other sites. And hacking Apple IDs is a common practice, because once you do it you can hold the phone for ransom, as well as use your contact list to harass everyone in the list, see where you are going to be from your calendar, stalk any of your contacts (or you), and a lot of other evil.

If your Apple ID without 2FA has not been hacked it's only because no one has wanted to (yet).

Please show me where I have said that Apple can do no wrong. Ridiculous! However, Apple's 2FA implementation is the best and most effective I have seen. Although Google and Yahoo come close.

Oh, and I missed your comment about locking down your phone. 2FA locks down your Apple ID, not your phone. You never need 2FA to access your phone.

Why is it a bad idea? Anywhere you could not get a 2FA code would also be somewhere you could not login to your AppleID anyway. So a lack of connectivity is moot. Logging in to your AppleID requires internet access (cellular or wifi) and 2FA codes via iCloud push notification also require an internet connection.

Since you can not access your AppleID without internet, what difference does having a 2 factor login system also tied to the internet make?

First, Equifax had nothing to do with IAM. It was unpatched OS which was two releases behind.

Two, if Apple ID is easy to hack and continuously under attack, there is a significant problem with their IAM.

Third, since, Apple has gone https, network traffic is encrypted. Further more, no one sends password unencrypted. If they do, they are dumber than dumb.

Fourth, two factor is an additional verification, which I am not opposed to. My gripe is with not allowing users to turn it off. A need may arise to do so.

Fifth, if Apple has constant attack problem, more than the Pentagon, then Apple enhance their security in other areas.

I use Google mail, Google uses 2FA when you change any security setting, once you authenticate once, you don’t need to on subsequent logins.

Here is another idea if Apple want impose 2FA. Why not build in random number generator like the RSA token application so, users connecting from slow network font have to deal with numerous issues.

There is frog in well. To the frog’s world view is dark, cold and deep.

The author did not say, there is not any Internet. He said, the connection is slow and unreliable.

Mobile network vary greatly all across the world.

Again, if the connection is slow and unreliable, your going to have more issues just signing into your AppleID on Apple’s secure system than anything else. The push notification 2FA code won’t be the problem. Just accessing your account will be the problem. So 2FA is still moot in that scenario as well. Since both accessing your AppleID and receiving a 2FA code are subject to the exact same limitations of your internet connection.

2FA makes no difference at all if you have no internet connection or a crappy internet connection.

If you have an older Apple TV, then when the password fails you're prompted on another Apple device to get a 6 digit code. Try logging into the Apple TV again, but this time when you enter your password, follow your password with the 6 digits (no space).

No, Apple is not listening in this user-to-user forum. What is likely happening is you have a company email account on your phone, and your Exchange administrator has installed a security profile on your phone that forces the phone to lock after 30 seconds. Take it up with your company IT department.

Auto-lock is configurable up to 5 minutes or to Never. Settings—-> Display—>Auto-lock.

So, just like Lawrence offered several hours ago.

Sure seems like you just wish to argue and disagree with members here.

Lawrence's previous suggestion about an MDM was p[osed as an "if" scenario, not fact as you reacted to.

Pall wrote:

No, company or employer in you vernacular cannot change a BYOD settings. MDM app runs in a sand box.

WRONG. Completely WRONG. It has nothing to do with an MDM app. If you install a company MS Exchange account on your phone or a company Enterprise app the company can also require you to install a device management profile. This profile can, among other things:

• Require you to have a passcode on the phone.
• Require that the passcode be 6 digits, or even alphanumeric
• Require a specific screen lock timeout
• Require that screen lock be set to Immediately (this is also required by Apple for Touch ID and Face ID)
• Require that backups be encrypted
• Require that the Erase after 10 failed passcode attempts be enabled
• Require that the phone use a specific VPN
• Require that the phone NOT use a VPN other than the specified VPN
• Require that Limit Ad Tracking be enabled
• Require that Time Setting be set to automatic
• Provide for remote erase of the device

There are other options, less commonly used.

This is all true, even for a BYOD. Because if that level of control wasn't available from Apple no sane company would ever allow BYOD. And all of these have been reported and discussed in Apple Support Communities over the past few years.

Other than using the company VPN, I haven’t done anything else. Only other thing I did is download and install the Citrix app

I have my company Exchange and other applications on my IPhone running on a Citrix MDM sandbox.

i don’t have anything configured in my IPhone mail Account, zilch, no mail account or password.

Citrix app establishes a TLS 1.2 (https) connection gets my mail. We use SSO and I have to only sign onto Citrix once every 8 hours. I use the same Citrix in my iPad also.

i will not give access to control my phone to anyone else in a million years. I read EULA thoroughly multiple times before I agreed to install the Citrix app.

Not aware of any medium to large companies using mobile devices without using a MDM.

FYI everything is stored in a Citrix sandbox so, if you loose the phone, one simply wipe the Citrix sandbox from the MDM manager.

Surely, you will say this is all wrong.