A while back, I enabled two-factor authentication to a number of my accounts following Mat Honan’s terrible hacking story.*

This morning I noticed that, without any fanfare, Apple has extended that preference to the iCloud.com website portal …

Verify_iCloud_screen_1_7_14

… so that to log in to iCloud, I need to have one of my ‘trusted devices’. (Well, given the Snowden/NSA revelations, ‘trusted device’ is a relative term now, surely?)

iCloud_verify

Apple sends a four-digit verification code which is entered and voila!

iCloud_digits

Anyway, that’s a good step.

I highly recommend you enable two-factor authentication on your key accounts. It’s a small inconvenience with a huge potential pay-off in terms of security.

– P

* See Learning from Mat Honan’s disaster (Apple & me)