Apple has boosted the security for the iCloud.com web portal, by requesting users switch to the two-factor authentication system.
In light of the recent embarrassing celebrity iCloud hack (both for Apple and the victims) the firm is making good on its promise to make it more difficult for unauthorised parties to gain access to accounts.
As a result, the company is now asking users to enter a verification code on the iCloud.com website. That code is sent via a notification to one of the users ‘trusted’ devices.
Until the verification code has been entered, iCloud.com visitors will be able to log in, but cannot access apps like Mail, Contacts, Calendar, Reminders, Pages, Numbers and Keynote. For obvious reasons, access to the Find My iPhone security tool does not require the ID to be verified.
Two-factor authentication was introduced last year as a means of beefing up security for iTunes accounts. Users were asked to verify their IDs using a secondary device in order to protect iTunes, App Store and iBooks purchases. If they change their iTunes password, a verification code is sent to the trusted device to ensure it’s really them.
The rollout for iCloud.com comes a week after Apple began sending emails to users anytime their accounts were accessed from a web browser. The firm is asking users to ignore those emails if the logins are legitimate, but advises users to instantly change passwords if they do not recognise the attempt.
Apple recently blamed weak passwords and security questions of the victims for the hacks, which led to the personal photos of over 100 female celebrities being leaked online.