Use security keys for two-factor authentication on Mac
About security keys
Security Keys for Apple Account is an optional advanced security feature designed for people (such as celebrities, journalists and members of government) who want extra protection from targeted attacks, including phishing and social engineering scams. A security key is a small third-party hardware device that you can use to verify your identity when signing in to your Apple Account. It replaces six-digit verification codes sent to you by text message or generated by one of your devices.
Because you use a physical key as part of the sign-in process, security keys are a stronger form of two-factor authentication. They can prevent even an advanced attacker from obtaining your information in a phishing scam.
For more details about security keys, see the Apple Support article About Security Keys for Apple Account.
Set up security keys
You need to set up at least two security keys so you can use one of them as a backup in case the other one is lost, damaged or stolen. You can pair up to six keys with your account.
Important: When you use Security Keys for Apple Account, you need a trusted device or a security key to sign in to your Apple Account and make changes to your account. If you lose all your trusted devices and security keys, you could be locked out of your account permanently.
On your Mac, choose Apple menu
If you don’t see your name, click “Sign in,” enter your Apple Account email address or phone number, then enter your password.
Click Sign-In & Security, then click Two-Factor Authentication.
Go to Security Keys, then click Set Up.
Follow the onscreen instructions.
You may need to update your devices to the latest version of macOS, iOS or iPadOS, or sign out of inactive devices.
Use a security key to sign in
When prompted, use your security key by inserting, touching or clicking it, or by bringing it close to the device (depending on the type of key).
Follow the onscreen instructions.
Add or remove security keys
On your Mac, choose Apple menu
If you don’t see your name, click “Sign in,” enter your Apple Account email address or phone number, then enter your password.
Click Sign-In & Security, then click Two-Factor Authentication.
Go to Security Keys, then click Add.
Do one of the following:
Add another security key: Click Add Security Key, then follow the onscreen instructions. (You can add up to six security keys.)
Remove a security key: Click the security key you want to remove, then click Remove Key. (You must always have at least two security keys.)
Remove all your security keys: Click Remove All Keys, then click Remove.
Note: If you remove all your security keys from your Apple Account, your account reverts to using six-digit verification codes for two-factor authentication.