Two-factor authentication is not optional on an Apple Developer account. Done right it is invisible; done carelessly it locks you out of your own listings. Here is how to do it right.
Why it matters more here
This account controls your App Store presence, builds and revenue. A stolen password alone should never be enough to get in — 2FA is the control that guarantees it.
How Apple’s 2FA works
Signing in from a new device requires the password plus a six-digit code sent to a trusted device or trusted phone number. Keep at least two trusted numbers.
Setting it up
- iPhone/iPad: Settings → your name → Sign-In & Security → Two-Factor Authentication.
- Mac: System Settings → your name → Sign-In & Security.
- Browser: account.apple.com → Sign-In and Security.
Just bought an account? Do this immediately
This is the most important moment. When you buy an Apple Developer account, take full control at once:
- Change the password.
- Add your own trusted phone number and verify it.
- Remove any numbers or devices you do not recognise.
- Sign out of all other sessions.
- Confirm access in App Store Connect.
An account is only truly yours once you hold the password and the second factor. Any seller who resists this is a red flag — see our buyer’s checklist.
Common problems
- No codes arriving? Check the trusted number and request an SMS.
- Changing your number? Add the new one before removing the old — the top cause of lockouts.
- Team lockouts? On a company account, each user has their own 2FA.
FAQ
Can I disable 2FA?
No — it is required for membership.
Do I need a recovery key?
Optional; it adds security but also lockout risk. Most developers skip it.
Need an account that is verified and ready to secure? Buy an iOS Developer account and take control in minutes.