[2] As of December 2024, Apple has discontinued security questions & made two-factor authentication mandatory for activating iTunes & App Store functionality on a newly created account – a process that requires a device with at least iOS 13.4, iPadOS 13.4, macOS 10.15.4 or later.
After confirming the changes, users may still be asked to verify their information the next time they use their Apple Account to purchase, such as using the App Store.
[citation needed] Users can use different Apple Accounts for their store purchases and their iCloud storage and other uses.
[9] iCloud allows users to store data such as music and iOS applications on remote computer servers[10] for download to multiple devices, such as iOS-based devices running iOS 5 or later,[11] and personal computers running OS X 10.7.2 Lion or later, or Microsoft Windows (Windows Vista service pack 2 or later).
The service also allows users to wirelessly back up their iOS devices to iCloud instead of manually doing so using iTunes.
[13] An Apple Account is a valid email address, protected by a password set by the user of at least eight characters.
The feature uses the Find My service to send a four-digit pin code to a trusted device associated with the Apple Account when the second verification step is required for authentication.
Based on OAuth 2.0 and OpenID Connect, it is designed as a privacy-focused alternative to other social login services, minimizing the amount of personal information sent to a service, and allowing the use of disposable email addresses forwarding to the user's Apple Account email.
[17][18] An Apple Account may be disabled for security reasons if the password is entered incorrectly multiple times.
[21] To reset the password when these security features are enabled, both the Recovery Key and at least one trusted device is required.