在最新版本的 iOS 中，Apple启用了一项名为“双因素身份验证(Factor Authentication)”的新功能。他们之前启用了一项称为两步验证(Two-Step Verification)的功能，但它不如新的身份验证方法(authentication method)强大或安全。
为了对您的 iCloud 帐户使用更强的两因素身份验证(factor authentication)，您首先必须禁用两步验证(step verification)。在本文中，我将逐步引导您完成整个过程(process step)，以确保只有受信任的人才能访问您的帐户。
为您的 iCloud 帐户启用两因素身份验证(factor authentication)后，任何尝试登录您帐户的设备都需要得到另一台受信任设备的批准。一旦获得批准，受信任的设备还将收到一个需要在登录设备(device signing)上输入的代码。很酷的是，受信任的设备还可以看到尝试登录的来源地图。
禁用两步验证
首先，如果您启用了两步验证，则需要将其禁用。如果您没有启用该功能，则可以跳过此步骤。要开始使用，请访问appleid.apple.com并使用您用于 iCloud的Apple ID登录。
登录后，继续并单击“安全(Security)”部分右侧的“编辑”按钮。(Edit)
一直向下滚动(Scroll)到底部，您会看到一个名为关闭两步验证(Turn Off Two-Step Verification)的链接。当您单击它时，系统会要求您确认是否要这样做，然后您将获得另一个对话框，您必须在其中选择三个安全问题。
选择好问题后，单击继续(Continue)，系统会要求您验证生日。再次单击(Click) 继续(Continue)，您将被要求输入救援电子邮件地址(rescue email address)。它必须与您的Apple ID 电子邮件(Apple ID email)地址不同。
最后，您会收到一条消息，说明两步验证已关闭。此时，您可以继续并退出该网站。
启用两因素身份验证
现在让我们继续启用两因素身份验证(factor authentication)。为此，我们必须使用已经更新了最新版本 iOS的iPhone 或 iPad 。(iPhone or iPad)如果设备尚未登录您的 iCloud 帐户，您将在尝试登录时收到一条新消息，询问您是否要启用此功能。
如果您的设备已登录 iCloud，请点击设置(Settings)、iCloud，然后点击最顶部的您的姓名。
再次，一直滚动到底部，然后点击(bottom and tap)设置两因素身份验证(Set Up Two-Factor Authentication)链接。
下一个屏幕将向您显示两因素身份验证概述(factor authentication overview)，这是本节上方的第一张图片。点击继续(Continue)，然后输入要用作受信任设备的电话号码。代码和批准(code and approval)必须来自您在此处输入的号码。
验证电话号码(phone number)后，您可能需要也可能不需要在您的帐户中输入安全问题的答案。在我的一个Apple ID(Apple IDs)上，我必须回答所有三个安全问题，但是当我为不同的Apple ID设置两个因素时，我不必回答安全问题。
您现在应该在底部看到两个因素是On。此时，您可以根据需要添加另一个受信任的电话号码(phone number)。现在已经设置了两个因素，尝试在另一台设备上登录 iCloud，系统会要求您输入发送到受信任设备的验证码。(verification code)
在受信任的设备上，将显示一条消息，其中显示请求登录的位置以及允许(Allow)或不允许(Don’t Allow)选项的地图。
如果您点击不允许(Don’t Allow)，则不允许此人登录该帐户。如果您点击允许(Allow)，您将看到一个弹出窗口，其中包含必须在另一部手机上输入的六位数验证码(verification code)，以便它可以登录。
如您所见，这比仅启用两步验证要安全得多。唯一的缺点是它可能有点不方便，特别是如果您有多个家庭成员登录同一个 iCloud 帐户。但是，一旦初始设置完成并且每个人都经过验证，它就不会经常出现。
此外，当您登录 iCloud.com 时，您必须先获得批准才能加载任何内容。以前，如果您启用了两步验证，您仍然可以登录并使用“查找我的 iPhone”(Find My iPhone)应用程序，而在您验证身份之前，其他所有功能都将被禁用。
现在有两个因素，在您使用受信任的设备进行验证之前，您甚至无法看到“查找我的 iPhone”应用程序。(Find My iPhone)这更安全，但同样不太方便。您可以选择信任浏览器，这样每次登录时都不会提示您输入密码，但是您需要确保您退出，否则有人可能会过来坐在您的计算机上并转到 iCloud .com，您仍然可以登录。
总体而言，双因素身份验证可以更好地保护您的帐户免受未经授权的访问，并且对于那些想要确保其数字隐私的人来说是一个很好的步骤。如果您有任何问题，请随时发表评论。享受！
How to Enable Two Factor Authentication for iCloud on iOS
With the latest release of iOS, Apple has enabled a nеw featυre called Two Factor Authentication. Τhey previously had enabled a feature called Two-Step Verifiсation, but that isn’t as robuѕt or as securе аs the new authentication method.
In order to use the stronger two factor authentication with your iCloud account, you first have to disable two step verification. In this article, I’ll walk you through the entire process step by step so that you can ensure only trusted people can access your account.
Once you enable two factor authentication for your iCloud account, any device trying to sign into your account will need to be approved by another trusted device. Once approved, the trusted device will also receive a code that needs to be entered onto the device signing in. What’s cool is that the trusted device will also be able to see a map of where the attempted sign in was originating from.
Disable Two Step Verification
Firstly, if you have two-step verification enabled, you will need to disable it. If you don’t have that enabled, you can skip this step. To get started, go to appleid.apple.com and sign in with the Apple ID you use for iCloud.
Once logged in, go ahead and click on the Edit button that is located to the right of the Security section.
Scroll down all the way to the bottom and you’ll see a link called Turn Off Two-Step Verification. When you click on that, you’ll be asked to confirm that you want to do that and then you’ll get another dialog where you have to pick three security questions.
Once you have picked your questions, click Continue and you’ll be asked to verify your birthday. Click Continue again and you’ll be asked to enter a rescue email address. It has to be something different than your Apple ID email address.
Finally, you’ll get a message stating that two-step verification has been turned off. At this point, you can go ahead and sign out of the website.
Enable Two Factor Authentication
Now let’s go ahead and enable two factor authentication. In order to do that, we have to go to an iPhone or iPad that is already updated with the latest version of iOS. If the device is not already logged into your iCloud account, you’ll get a new message asking if you want to enable this feature when you try to sign in.
If your device is already signed into iCloud, then tap on Settings, iCloud and then tap on your name at the very top.
Again, scroll all the way to the bottom and tap on the Set Up Two-Factor Authentication link.
The next screen will show you the two factor authentication overview, which is the first image above in this section. Tap Continue and then enter the number for the phone you want to use as a trusted device. The code and approval will have to come from the number you enter here.
Once you verify the phone number, you may or may not have to enter the answers to the security questions on your account. On one of my Apple IDs, I had to answer all three security questions, but when I setup two factor for a different Apple ID, I didn’t have to answer the security questions.
You should now see at the bottom that two factor is On. At this point, you can add another trusted phone number if you like. Now that two factor is setup, try to log into iCloud on another device and you’ll be asked to enter the verification code sent to the trusted devices.
On the trusted device, a message will appear that shows a map of where the sign in was requested and the options to Allow or Don’t Allow.
If you tap Don’t Allow, the person will not be allowed to sign into the account. If you tap Allow, you’ll then get a popup with the six-digit verification code that has to be entered on the other phone so that it can sign in.
As you can see, this is a lot more secure than just enabling two-step verification. The only downside is that it can be a little inconvenient, especially if you have several family members logging into the same iCloud account. However, once the initial setup is done and everyone is verified, it won’t come up that often.
Also, when you go to sign into iCloud.com, you’ll have to get approval before you can load anything. Previously, if you had two-step verification enabled, you were still able to login and use the Find My iPhone app, while everything else was disabled until you verified your identity.
Now with two factor, you won’t even be able to see the Find My iPhone app until you are verified using a trusted device. This is more secure, but again, less convenient. You can choose to trust the browser, so that you won’t be prompted to enter the code each time you login, but then you need to make sure you sign out, otherwise someone could just come and sit on your computer and go to iCloud.com and you’ll still be logged in.
Overall, two-factor authentication does a better job of protecting your account from unauthorized access and is a great step for those who want to ensure their digital privacy. If you have any questions, feel free to comment. Enjoy!
