Protect iCloud Mail with two-factor authentication

Apple's cloud storage system, iCloud, includes a free web-based email account. This account can be accessed from any Mac, Windows, or iOS device using the iCloud website or Mail app. Two-factor authentication protects your iCloud Mail account from theft, hacking, and other abuse by unauthorized parties. Learn how to protect your account with this extra layer of defense.

Two-factor authentication requires two ways to authenticate, such as a computer and a phone, adding a barrier between the person logging in and their account. This method is more secure than using passwords alone.

Here's how to enable two-factor authentication for your iCloud Mail account and other programs associated with your Apple ID from your Mac, iPhone, or Apple ID website.

Before you can use Mail on iCloud.com and set up two-factor authentication, you must set up an @icloud.com email address.

  1. Go to the Apple menu and select System Settings .

    This option may be labeled "System Preferences."

  2. Select Apple ID .

  3. Click Login & Security .

    In some versions of macOS, you may see this option labeled Password & Security .

  4. Select Turn on next to Two-factor authentication .

    If prompted, add your Apple ID email and password.

  5. Answer the security questions and click Continue > Verify when finished.

  6. Enter the phone number you want to use for the verification code and select Continue again.

  7. On your Mac, enter the code you received on your trusted phone.

You can also use your iPhone to set up two-factor authentication for your Apple ID.

  1. Go to Settings > Apple ID > Sign-in & Security .

    In older iOS versions, tap Apple ID > Password & Security .

  2. Click Turn on two-factor authentication > Continue .

  3. Enter the phone number you want to use as a trusted phone number. Choose to receive a two-factor authentication code via text message or automated phone call.

  4. When you click Next , Apple will send a verification code to the phone number you provided. Enter the verification code to verify your phone number and turn on two-factor authentication.

If you don't have access to your Mac or iOS device, use your browser to turn on two-factor authentication.

  1. In your browser, go to the Apple ID page.

  2. Sign in and scroll down to Sign in and security > Account security .

  3. Follow the prompts to create a security question and trusted phone number.

Another layer of protection you can add is to create application-specific passwords for third-party apps you use with your Apple ID.

Here's how to generate a secure application-specific password.

  1. Make sure your Apple account has two-factor authentication enabled.

  2. In the browser, go to Manage your Apple ID, then click Sign In to enter your Apple ID and password.

  3. From Login and Security , select Application-specific passwords .

  4. Select Generate an application-specific password .

  5. Enter the label of the program or service for which you want to create a password, and then select Create .

  6. Re-enter your Apple ID and password.

  7. After taking the password generated for you and pasting it directly into the application you want to use it, click Finish .