• Hacker News
  • new|
  • comments|
  • show|
  • ask|
  • jobs|
  • captn3m0 1 hours

    Does anyone know what is the "iCloud security code" mentioned? Is it just the 6 digit code that Apple sends to verify iCloud access?

    traceroute66 53 minutes

    > Is it just the 6 digit code that Apple sends to verify iCloud access?

    No. It is unrelated to Apple ID 2FA.

    If its what I'm thinking of, it used to be a user-visible thing[1] back in the day.

    But now with the need for increased security posture in the modern environment it is now not user visible but held locally and encrypted using the local device secure enclave key. So you would typically now see a prompt for the device password so the enclave can be accessed to access the key to setup/renew iCloud access tokens.

    As far as I am aware the only user-visible string still available in the Apple world is (for obvious reasons) the FileVault recovery key on macOS devices. Which is only visible once ... shown to you when you first enable FileVault.

    [1] https://support.apple.com/en-us/101265

    detourdog 51 minutes

    I think it's longer then 6 digits. Long ago I did this and I remember it being a long code with dashes.

    traceroute66 46 minutes

    > long code with dashes

    That sounds more like the FileVault recovery key ?