2fa security keys?

[beachBOYken]

Hi

In apple settings under icloud and security 2fa I can set up security keys, does anyone use this on there Apple ID?

Just wondered what I would need to set it up, I have a few Apple IDs one of which doesn’t have trusted devices so I wanted a few backup options as currently it’s just using my phone number to receive one time codes by text.

Would this be one of them yubikeys or whatever you call them.

Thanks

 

[ChrisD.]

They are passkeys and much more secure than 2FA via text. You should use them wherever you can.

 

[beachBOYken]

They are passkeys and much more secure than 2FA via text. You should use them wherever you can.

Thanks, yeah like I said my apple UK ID I use trusted devices so not worried about it for that, but my other ID I just use text verification currently.

Is it a Yubikey I need to buy to set this up?

I have an iPhone 15pro, iPad Pro, and MacBook, all have USB C. I use this other Apple ID mainly for my Apple TV 4K but sometimes sign into the App Store on my iPad.

Would you be able to link me something ideal to get please.

 

[ChrisD.]

Just use Apple Passwords, or Bitwarden/1Password etc. No need for a physical key IMO.

 

[beachBOYken]

Just use Apple Passwords, or Bitwarden/1Password etc. No need for a physical key IMO.

Oh so it's basically the same as TOTP codes that I set up in a password manager.

Could I use Microsoft Authenticator or 1password?

 

[ChrisD.]

Oh so it's basically the same as TOTP codes that I set up in a password manager.

Could I use Microsoft Authenticator or 1password?

Apple Passwords will do passwords, OTP codes, and passkeys. It won't do push notifications.

 

[beachBOYken]

Apple Passwords will do passwords, OTP codes, and passkeys. It won't do push notifications.

I have 1password, so might be best to set it via that. Don't have apple passwords set up.

 

[ChrisD.]

I have 1password, so might be best to set it via that. Don't have apple passwords set up.

If you have 1Password then use that.

 

[beachBOYken]

If you have 1Password then use that.

Will give it a go, was just a bit confused as it mentions a physical security key such as yubikey, and doesn't mention any alternative like 1password.

I just realised you're talking about passkeys. I got mixed up with my original question about setting up security keys via a yubikey.

 

[ChrisD.]

Will give it a go, was just a bit confused as it mentions a physical security key such as yubikey, and doesn't mention any alternative like 1password.

On the Apple ID itself I think a physical is an option, but if you have multiple Apple devices I would say that requirement is negated because you can use your other devices on the same Apple ID to authenticate a request.

 

[beachBOYken]

On the Apple ID itself I think a physical is an option, but if you have multiple Apple devices I would say that requirement is negated because you can use your other devices on the same Apple ID to authenticate a request.

Yeah, though my other Apple ID doesn't have multiple trusted devices, I will look into this passkey thing, 1password reports as saying passkey available.

 

[visibleman]

No need for a physical key IMO.

Isn't Apple Security Keys feature for physical FIDO hardware keys as Apple list in this doc? - https://support.apple.com/en-gb/HT213154

Passkeys are something completely different.

 

[Cromulent]

The Yubikey Bio is probably the safest option out there as it combines a password with a hardware token and requires a fingerprint at the same time.

Edit: Fingerprint on the Yubikey not that Mac built in one.