Tag: Two-Factor Authentication »

Apple recently suffered a security breach when the iOS Developer Portal had information stolen from it, purportedly by a ‘researcher’. The point is, not even Apple is immune to hackers, and you need to protect your identity as best as you can because you never know who will get their hands on it. You need to secure your online accounts as best as possible.

One way to protect your information is to use an app like 1Password to generate and track secure passwords for all your accounts. There are other apps that can be used to similar effect, but 1Password is one of the most robust solutions and also is cross-platform, with support for syncing up to PC and Mac versions of the app, along with universal iOS support. Now, if you’ve got your hands on it, let’s begin.

You’ll first be prompted to set up and enter a Master Password. Make sure that this is something incredibly memorable and secure, as it is used to decrypt your 1Password info. Developer AgileBits has a handy guide toward ensuring that your master password is secure.

Now, go to categories, choose one, and hit the + button. For this, let’s choose Logins. You can rename the text that says Login to the name of the service. Put in your username. Now, for the password section, you can either put in your current password, or tap the combination lock icon to generate a new one. It’s possible to customize the length, and to customize the ‘recipe’ that comprises the password in order to make it pronounceable (and easier to remember) or to make it as random and secure as possible.

Now, if you go to this login once done customizing its details, tapping on the password will let you copy its data to the clipboard so that you don’t have to remember it, or reveal it to you as a reminder. As well, the app’s web browser lets you automatically input passwords for logins and other info. You can also set up 1Password in the settings to sync up to iCloud and Dropbox to make the info available on other devices.

Passwords, however, can still be cracked; so two-step verification is a great step to take toward ensuring that your identity is protected by giving you verification codes on a trusted device. Apple supports it, as outlined in this earlier guide. Google supports it as well, and it’s well worth setting up as it adds a trust element that’s more than just a string of characters. Stay safe out there!

Apple is introducing a new way to protect the security of your iTunes account. It's called two-step verification, and while it does involve an extra step to log in, it will help make logging in to your Apple ID more secure and make it harder to break into through the use of a trusted device and a secret passkey.

See, security questions are not entirely safe since it's possible for someone who wants illicit access to your account to get things like your mother's maiden name or first job. So instead, this presumes that a more capable form of security for your account is a physical device that you would have to own in order to get access to your account - this can be a trusted iOS device or any SMS-capable phone, though not a Google Voice account, along with a security key or one's password. It's unlikely that someone wanting access to your account from an untrusted source will have two of the three.

Go to Apple's ID page, and log in with the Apple ID you want to set up two-step verification on. Go to the Password and Security section, and if it's available, choose to set it up. You will need to wait 3 days before you can complete the setup of your account. So bookmark this page and come back in 3 days!

Welcome back, unless you stuck around to see what the steps are, then thanks for sticking around!

Now, follow the various dialogs that appear. Apple will warn that once two-step is enabled, it can't be disabled, and that it will require at least two of the three necessary components.

Then, Apple will require you to verify your trusted devices. Every device you choose to verify will have a verification code pushed to it, and you can independently verify your iPhone's phone number in case you change devices or switch to another OS. Not that you'd do such a thing.

Then, Apple will give you your security key. This is one of the other necessary components to get back in to your account. You will need to securely store a copy of this key, by either writing it down, or printing out a copy somewhere. Apple will then make you enter the security key they just gave you.

Apple will then give you one final warning before enabling two-step verification on your account.

Congratulations! You've enabled two-step verification on your account. This will make it harder for unauthorized access into your account. You can disable two-factor from the Apple ID settings if you find it too much of a hassle, however.