Site name
Apple
Site URL
https://apple.com/
Update reason
Other (please describe below).
Additional information
Apple's hardware token 2fa comes with a steep cost which should be included in the notes:
Upon registering security keys, SMS 2FA, trusted device codes, and recovery contacts are forced to be turned off. The recovery key can only be used with a security key present, and can only be used for a password reset. Losing the security keys means losing your account, period, unless you then remove all security keys using a trusted device, provided you can still access and unlock them; this will re-enable all the others including SMS.
Apple gatekeeps using security keys behind their equivalent of Google Advanced Protection Program. You either enroll or you don't get to use security keys. And you do not get a backup or recovery solution except buying more security keys, up to a max limit of 6 keys.
Another note that should be included is that Security Key protection is only available if all devices on a person's Apple account both supports and is updated to iOS 15 or later and its equivalents. If even a single device does not meet this criteria, you are barred from registering security keys.
Issue Eligibility
Site name
Apple
Site URL
https://apple.com/
Update reason
Other (please describe below).
Additional information
Apple's hardware token 2fa comes with a steep cost which should be included in the notes:
Upon registering security keys, SMS 2FA, trusted device codes, and recovery contacts are forced to be turned off. The recovery key can only be used with a security key present, and can only be used for a password reset. Losing the security keys means losing your account, period, unless you then remove all security keys using a trusted device, provided you can still access and unlock them; this will re-enable all the others including SMS.
Apple gatekeeps using security keys behind their equivalent of Google Advanced Protection Program. You either enroll or you don't get to use security keys. And you do not get a backup or recovery solution except buying more security keys, up to a max limit of 6 keys.
Another note that should be included is that Security Key protection is only available if all devices on a person's Apple account both supports and is updated to iOS 15 or later and its equivalents. If even a single device does not meet this criteria, you are barred from registering security keys.
Issue Eligibility