Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> If you lose your only iPhone, you lose the keys.

But they're in your iCloud Keychain. You should just log in to iCloud and have them again.



"just log in"?

How you do that after you use Apple Passkey and lose your phone? (and SIM)


Because your iCloud Keychain has nothing to do with your SIM card.

https://support.apple.com/guide/security/secure-icloud-keych...


I know it does not. It's in the Cloud. I was referring to SIM and phone number when I was thinking potential way to recover.

Can you explain how a person can login into their iCloud and recover their iCloud Keychain after they have lost their only Apple device (iPhone) if Apple Passkey needed to access iCloud?


Passkey is not required to access iCloud. You're thinking of 2FA on an Apple ID.

https://support.apple.com/kb/HT204974


Thanks. As I expected. You need to have your SIM (to get access into iCloud)

https://support.apple.com/en-us/HT213305

>To recover a keychain, a user must authenticate with their iCloud account and password and respond to an SMS sent to their registered phone number.

In other words. If you lose your iPhone (containing your SIM) you can't get access to iCloud or iCloud keychain until you have a new SIM with the same phone number from your carrier.

If you travel in a foreign country and lose your iPhone you are locked out of "everything Apple".


You can register VoIP and landline numbers as well, and nothing says the number must be yours; you can also add the number of a trusted family member or friend.

You can choose which preregistered number to send a message to (or to be called with a recorded voice) in the event you need access to your account in an emergency.

This also implies you have no other Apple devices which are signed into your account, as they will receive a code by default.

SMS or voice fallback is "plan B".


SMS works with password access as 2FA it's part of plan A in recovery.

None of the methods you mention are something that should be expected from normal users. Or they don't work when traveling. I travel a lot.

"There is a way you could set it up" does not mean Apple has a good solution. As I'm a person without family and only one iPhone I stay away. People who don't pay attention are fucked.


No, the first 2FA step is for Apple to send your Apple devices a TOTP code, which is not delivered via SMS. This is the case in every situation.

Only if you have no access to any device do you need to fall back to account recovery via SMS or phone call, to any pre-registered number.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: