Apple Account

Last updated

Apple Account, formerly known as Apple ID, is a user account by Apple for their devices and software. Apple Accounts contain the user's personal data and settings, and when an Apple Account is used to log in to an Apple device, the device will automatically use the data and settings associated with the Apple Account. [1]

Contents

Usage

Account creation

An Apple Account can be created by going to the associated website. [2]

Modification

Users can change their passwords or personal information on the My Apple Account page by selecting the "Manage your account" link. Changes that a user makes to an Apple Account account, whilst they are using one Apple product, [3] are also recognized by other applications where the user uses the same Apple Account account (for example, the online Apple Store, iCloud, or Photos). [4] Apple will send a verification message to the email address provided, and the user is required to follow the URL included in the verification email to confirm the changes. After confirming the changes, users may still be asked to verify their information the next time they use their Apple Account to purchase, such as using the App Store.[ citation needed ]

Multiple Apple Accounts

Users can use different Apple Accounts for their store purchases and their iCloud storage and other uses. This includes many MobileMe users who have always had difficulties as they were forced to use more than one Apple Account, because on signing up to the MobileMe service a new Apple Account was automatically created using the me.com email address being created at the time, meaning users could not change their previous Apple Account email address to be their me.com email address, and it has always remained so. Apple does not permit different accounts to be merged. [5] However, if one account is disabled (in most cases, due to fraudulent transactions or other abusive activity or for security reasons), any other accounts associated with the primary account will also be disabled, and the user cannot create any new accounts until the affected account has been unlocked. [6]

Apple Online Store

An Apple Account is not required to place an order with Apple. Apple lets buyers place orders on its online store without an Apple Account by using the Guest Checkout Feature. An Apple Account and the Guest Checkout Feature both allow the customer to access order info such as invoices, check the order status, and track the shipping package. However, Apple Accounts allow users to customize their Apple Online Store experiences. Users can save items they are interested in purchasing; save a cart if they are almost ready to place an order; save shipping and billing addresses and payment information to speed up the checkout process; use 1-Click ordering on Apple's website and check Apple Gift Card balances. [7]

iCloud

iCloud allows users to store data such as music and iOS applications on remote computer servers [8] for download to multiple devices, such as iOS-based devices running iOS 5 or later, [9] and personal computers running OS X 10.7.2 Lion or later, or Microsoft Windows (Windows Vista service pack 2 or later). iCloud replaced Apple's MobileMe service, [10] acting as a data syncing center for email, contacts, calendars, bookmarks, notes, reminders (to-do lists), iWork documents, photos and other data. The service also allows users to wirelessly back up their iOS devices to iCloud instead of manually doing so using iTunes.

Every Apple Account comes with 5 GB of free storage. More storage is available with a subscription. [11]

Security

An Apple Account is a valid email address, protected by a password set by the user of at least eight characters. [12] Apple will send a verification email to the email address the user provided, and the user is required to follow the URL included in the verification email to activate the account. It is possible to create an Apple Account without specifying a credit card. [13]

In March 2013, Apple launched two-factor authentication for Apple Account. The feature uses the Find My service to send a four-digit pin code to a trusted device associated with the Apple Account when the second verification step is required for authentication. [14]

On June 9, 2019, Apple unveiled a single sign-on provider built around Apple Account known as "Sign In with Apple". Based on OAuth 2.0 and OpenID Connect, it is designed as a privacy-focused alternative to other social login services, minimizing the amount of personal information sent to a service, and allowing the use of disposable email addresses forwarding to the user's Apple Account email. [15] [16]

Retrieval

An Apple Account may be disabled for security reasons if the password is entered incorrectly multiple times. The user will be warned with a message when the account has been disabled. [17] Apple Accounts and passwords can be retrieved by answering account security questions on iForgot or by resetting from a trusted device with iCloud enabled and an unlock passcode set. [17] [18] For security reasons, if Recovery Key or Two-Step Verification (not Two-Factor Authentication) is turned on, Apple will not reset the password for an Apple Account. [19] To reset the password when these security features are enabled, both the Recovery Key and at least one trusted device is required. [20]

Disabled accounts

Another error is "Your Apple Account has been disabled" without specific disclosure of a reason. The cause of this suspension is most likely due to a violation of the Apple Media Services Terms and Conditions (i.e., due to scams and other fraudulent activities) and resetting one's password does not clear it. [21] It has been reported as occurring on iOS devices as well as on Macs and PCs. One can request a review of an Apple Account by contacting iTunes Store support at www.apple.com/support/itunes. As of August 2021, due to the accuracy of the system, the decisions to disable Apple Accounts are rarely overturned, as the likelihood that the system would incorrectly disable any given Apple Account is less than one in one trillion per year (most likely due to CSAM detection, a safety feature that Apple had proposed but was later shelved). [22]

In both of the above cases, the user's profile will not be visible to anyone on iMessage or FaceTime, and they will not be able to sign in. The issue needs to be resolved within a set period (approximately 14–30 days in most cases). If too much time has passed since the Apple Account has been disabled, it will be permanently disabled and the user can no longer unlock it nor create any new Apple Accounts.

Encryption

Every iCloud automatically has standard data protection. All data is encrypted, and encryption keys are stored securely in Apple data centers to assist in case of account recovery. Only certain data is end-to-end encrypted, including iCloud Mail, Photos, and health data. In total, fourteen services are end-to-end encrypted.

Additionally, Apple offers Advanced Data Protection for iCloud, which is targeted at an audience of politicians, journalists, and other people who have important data on their iCloud accounts. With this, twenty-three services are end-to-end encrypted. If one loses access to an account with Advanced Data Protection, it is more difficult to recover the account. [23]

See also

Related Research Articles

Hushmail is an encrypted proprietary web-based email service offering PGP-encrypted e-mail and vanity domain service. Hushmail uses OpenPGP standards. If public encryption keys are available to both recipient and sender, Hushmail can convey authenticated, encrypted messages in both directions. For recipients for whom no public key is available, Hushmail will allow a message to be encrypted by a password and stored for pickup by the recipient, or the message can be sent in cleartext. In July 2016, the company launched an iOS app that offers end-to-end encryption and full integration with the webmail settings. The company is located in Vancouver, British Columbia, Canada.

Single sign-on (SSO) is an authentication scheme that allows a user to log in with a single ID to any of several related, yet independent, software systems.

<span class="mw-page-title-main">Keychain (software)</span> Password management system in macOS

Keychain is a password management system developed by Apple for macOS. It was introduced with Mac OS 8.6, and was included in all subsequent versions of the operating system up to macOS Sonoma. A keychain can contain various types of data: passwords, private keys, certificates, and secure notes. Keychain was replaced by Passwords with macOS Sequoia in 2024.

The following tables compare general and technical information for a number of notable webmail providers who offer a web interface in English.

A Google Account is a user account that is required for access, authentication and authorization to certain online Google services. It is also often used as single sign-on for third party services.

Password fatigue is the feeling experienced by many people who are required to remember an excessive number of passwords as part of their daily routine, such as to log in to a computer at work, undo a bicycle lock or conduct banking from an automated teller machine. The concept is also known as password chaos, or more broadly as identity chaos.

MobileMe is a discontinued subscription-based collection of online services and software offered by Apple Inc. All services were gradually transitioned to and eventually replaced by the free iCloud, and MobileMe ceased on June 30, 2012, with transfers to iCloud being available until July 31, 2012, or data being available for download until that date, when the site finally closed completely. On that date all data was deleted, and email addresses of accounts not transferred to iCloud were marked as unused.

LastPass is a password manager application. The standard version of LastPass comes with a web interface, but also includes plugins for various web browsers and apps for many smartphones. It also includes support for bookmarklets.

iCloud Cloud storage and cloud computing service by Apple

iCloud is a cloud service operated by Apple Inc. Launched on October 12, 2011, iCloud enables users to store and sync data across devices, including Apple Mail, Apple Calendar, Apple Photos, Apple Notes, contacts, settings, backups, and files, to collaborate with other users, and track assets through Find My. It is built into iOS, iPadOS, watchOS, tvOS, macOS, and visionOS. iCloud may additionally be accessed through a limited web interface and Windows application.

<span class="mw-page-title-main">Microsoft account</span> User account required for Microsoft-owned services

A Microsoft account or MSA is a single sign-on personal user account for Microsoft customers to log in to consumer Microsoft services, devices running on one of Microsoft's current operating systems, and Microsoft application software.

<span class="mw-page-title-main">Touch ID</span> Electronic fingerprint recognition feature by Apple

Touch ID is an electronic fingerprint recognition feature designed and released by Apple Inc. that allows users to unlock devices, make purchases in the various Apple digital media stores, and authenticate Apple Pay online or in apps. It can also be used to lock and unlock password-protected notes on iPhone and iPad. Touch ID was first introduced in iPhones with the iPhone 5s in 2013. In 2015, Apple introduced a faster second-generation Touch ID in the iPhone 6s; a year later in 2016, it made its laptop debut in the MacBook Pro integrated on the right side of the Touch Bar. Touch ID has been used on all iPads since the iPad Air 2 was introduced in 2014. In MacBooks, each user account can have up to three fingerprints, and a total of five fingerprints across the system. Fingerprint information is stored locally in a secure enclave on the Apple A7 and later chips, not in the cloud, a design choice intended to secure fingerprint information from users or malicious attackers.

<span class="mw-page-title-main">Proton Mail</span> End-to-end encrypted email service

Proton Mail is a Swiss end-to-end encrypted email service founded in 2013 headquartered in Plan-les-Ouates, Switzerland. It uses client-side encryption to protect email content and user data before they are sent to Proton Mail servers, unlike other common email providers such as Gmail and Outlook.com. The service can be accessed through a webmail client, the Tor network, Windows, macOS and Linux (beta) desktop apps and iOS and Android apps.

<span class="mw-page-title-main">Threema</span> Instant messaging smartphone service

Threema is a paid cross-platform encrypted instant messaging app developed by Threema GmbH in Switzerland and launched in 2012. The service operates on a decentralized architecture and offers end-to-end encryption. Users can make voice and video calls, send photos, files, and voice notes, share locations, and make groups. Unlike many other popular secure messaging apps, Threema does not require phone numbers or email addresses for registration, only a one-time purchase that can be paid via an app store or anonymously with Bitcoin or cash.

Criticism of Dropbox, an American company specializing in cloud storage and file synchronization and their flagship service of the same name, centers around various forms of security and privacy controversies. Issues include a June 2011 authentication problem that let accounts be accessed for several hours without passwords; a July 2011 privacy policy update with language suggesting Dropbox had ownership of users' data; concerns about Dropbox employee access to users' information; July 2012 email spam with reoccurrence in February 2013; leaked government documents in June 2013 with information that Dropbox was being considered for inclusion in the National Security Agency's PRISM surveillance program; a July 2014 comment from NSA whistleblower Edward Snowden criticizing Dropbox's encryption; the leak of 68 million account passwords on the Internet in August 2016; and a January 2017 accidental data restoration incident where years-old supposedly deleted files reappeared in users' accounts.

<span class="mw-page-title-main">Bitwarden</span> Open-source password manager


Bitwarden is a freemium open-source password management service that is used to store sensitive information, such as website credentials, in an encrypted vault. The platform hosts multiple client applications, including a web interface, desktop applications, browser extensions, mobile apps, and a command-line interface. The platform offers a free US or European cloud-hosted service as well as the ability to self-host.

Sign in with Apple is a single sign-on provider operated by Apple Inc., introduced on June 3, 2019, at Apple's 2019 Worldwide Developers Conference (WWDC) in iOS 13.

Microsoft Autofill is a password manager developed by Microsoft. It supports multiple platforms such as Android, iOS, and Google Chrome or other Chromium-based web browsers. It is a part of Microsoft Authenticator app in Android and iOS, and a browser extension on Google Chrome. It stores users' passwords under the user's Microsoft Account. It can import passwords from Chrome and some popular password managers or from a CSV file. In Microsoft Authenticator app, it requires multi-factor authentication to sign in which provides an additional layer of security. The passwords are encrypted both on the device and the cloud.

The iOS operating system utilizes many security features in both hardware and software, from the boot process to biometrics.

<span class="mw-page-title-main">Passwords (Apple)</span> Password manager developed by Apple

Passwords is a password manager application developed by Apple Inc. available for devices running iOS 18, iPadOS 18, macOS Sequoia, and visionOS 2 or higher. The app allows users to store and access encrypted account information saved to their iCloud Keychain or created via Sign in with Apple. Passwords can also be accessed through the iCloud for Windows program.

References

  1. "Apple ID - Official Apple Support". support.apple.com. Retrieved 2022-12-31.
  2. "Manage your Apple Account". Apple. Retrieved October 3, 2024.
  3. "Apple plans to launch 'entirely new phone'". Archived from the original on 2015-06-15. Retrieved 2015-06-12.
  4. "Change your Apple ID password". Apple. Archived from the original on 2014-02-28. Retrieved 2013-09-14.
  5. "Apple to let multiple Apple IDs merge, report says". CNET . CBS Interactive. 16 September 2011. Archived from the original on 9 November 2011. Retrieved 22 March 2013.
  6. "App Store stopped nearly $1.5 billion in fraudulent transactions in 2021". Apple Inc. Archived from the original on 2022-06-01. Retrieved 2022-06-01.
  7. "Benefits of an Apple ID". Apple Inc. Archived from the original on 2015-07-06. Retrieved 2013-09-14.
  8. "Where can I use my Apple ID?". Apple Inc. Archived from the original on 2017-06-10. Retrieved 2017-01-05.
  9. "System Requirements for ICloud". Archived from the original on May 30, 2014. Retrieved June 30, 2012.
  10. "4th Time a Charm for Apple? From iDisk to.Mac to MobileMe to iCloud". Wired . May 31, 2011. Archived from the original on June 11, 2011. Retrieved June 13, 2011.
  11. Evans, Jonny (2022-05-19). "How to avoid paying Apple for extra iCloud storage". Computerworld. Retrieved 2023-09-19.
  12. "Security and your Apple ID". Apple. May 19, 2018. Archived from the original on August 24, 2019. Retrieved August 24, 2019.
  13. "Create or use an Apple ID without a payment method". Apple. Archived from the original on 2014-10-10. Retrieved 2013-09-14.
  14. "Apple Strengthens iCloud Security With 2-Step Authentication". The New York Times . 21 March 2013. Archived from the original on 24 March 2013. Retrieved 22 March 2013.
  15. "App Makers Are Mixed on 'Sign In With Apple'". Wired. ISSN   1059-1028. Archived from the original on 2020-03-04. Retrieved 2020-05-05.
  16. Perez, Sarah. "Answers to your burning questions about how 'Sign In with Apple' works". TechCrunch. Archived from the original on November 27, 2019. Retrieved June 13, 2019.
  17. 1 2 "If your Apple ID is locked or disabled". Apple. Archived from the original on 2014-10-18. Retrieved 2013-09-14.
  18. "If you forgot your Apple ID password". Archived from the original on 2022-02-16. Retrieved 2022-02-17.
  19. "Two-step verification for Apple ID". Archived from the original on 2021-12-12. Retrieved 2021-12-04.
  20. "How to generate a recovery key". Archived from the original on 2020-12-15. Retrieved 2020-12-10.
  21. "Apple permanently disabled my account for App Store and iTunes..." Apple Inc. Archived from the original on 2021-12-04. Retrieved 2021-12-03.
  22. "Expanded Protections for Children: Frequently Asked Questions" (PDF). Apple Inc. Archived (PDF) from the original on 2021-08-19. Retrieved 2021-08-21.
  23. "iCloud data security overview". Apple Support. Retrieved 2023-01-20.