Two factor authentication

[gemma10]

Turned on the iphone this am and it informs me I have requested Find my Phone, which I haven`t. The next thing it requires me to input email and password and it then texts me a six digit two factor authentication number. What the hell is this all about? Should I be changing my passwords etc?

[atakacs]

Do you have any other Apple device linked to to your apple ID ?

[gemma10]

No, none at all-why?

[Capt Scribble]

I think someone is phishing for your email and password. The auth code will be a red herring.

[andytug]

Yup, either that or someone else is trying to use your Apple ID (deliberately or inadvertently e.g mistyped).

[ExXB]

Definatly phishing. But it isn't such a bad idea for you to turn on two factor. It isn't perfect, but it prevents others from accessing your account even if they know, or have guessed your password.

[esa-aardvark]

But it isn't such a bad idea for you to turn on two factor.

Unless you are going to be at sea, with wifi but no cellphone,
as I will be next year for a couple of months.
Still pondering what to do. Looks like I will have to forward my Gmail to
my secure email which (I hope) will let me in without 2 factor.

[gemma10]

Had a look at the Apple main site. Seems this "two factor" thingy is genuine, I just can`t understand how anyone could have done this. Thought Apple was safe from this point of view.

[MarcK]

You can turn off 2-factor in Gmail, which puts you back at password only.

[esa-aardvark]

In the past, when travelling in strange & not so strange
places, I have had both Hotmail & Gmail deny access
unless I let them send a code to my cellphone. This with 2 factor switched off. Seems to be triggered by moving around too quickly.
ie. Log in in Barcelona is OK. Fly to Vienna, then need this
pseudo 2 factor. Also when moving around in Asia.

[ExXB]

Originally Posted by gemma10

Had a look at the Apple main site. Seems this "two factor" thingy is genuine, I just can`t understand how anyone could have done this. Thought Apple was safe from this point of view.

What? These are text messages. All the need is your phone number. Likely many Android phone users got a similar message.

[ExSp33db1rd]

.

........unless I let them send a code to my cellphone.

What law says that one must have a cellphone ?

I've found that Gmail occasionally demand confirmation from a message sent to my "alternative" e-mail address before allowing me access, even if only using a different computer at home, sometimes.

Britain forged an Empire before e-mail, this is progress ?