Since June 2017 it is mandatory to set an app-specific password for iCloud for some services. Perhaps it has happened to you that you had to use an app-specific password while logging in with your Apple account (iCloud). With app-specific passwords you can safely log in with your iCloud account when using apps that do not support two-factor authentication.
In that case you can create a special password that can be used by one application. Moreover, this password is only generated once by your Apple account. This makes it super safe and easy to use.
What is an app-specific password?
With app-specific passwords you can safely log in with your iCloud account and Apple account if you use apps that do not automatically use two-step verification or two-factor authentication. Because the app cannot complete the verification you have to use an alternative, DIS is the app-specific password. You make this password through the method below and is only valid once. You then log in with your username and the app-specific password. As long as you remain logged in, the password continues to work. As soon as you log out you have to create a new app-specific password.
You should therefore only use a specific password to log in with your account for apps or facilities that are the verification codes not to support. This is an extra protection of a high level and ensures that your primary password cannot be collected or stored by apps from third parties you use.
Create app-specific passwords for iCloud
- Navigate to the Apple account webpage
- Log in with your Apple account and possibly perform the extra verification
- Then navigate to ‘Login and Security’
- Open ‘app-specific passwords’
- Click on the plus button with ‘passwords’
Enter the name of the application that will use the password, for example ‘Outlook’ and click on ‘Create’. Immediately a password is created that you must copy and use in the application instead of your Apple ID password. So fill in your Apple account and the app-specific password you just created.
Note that the app-specific password can only be used once. This password remains active as long as you are logged in. If you log out, you will have to generate a new app-specific password for this application.
Manage iCloud app-specific passwords
- Navigate to the Apple account webpage
- Log in with your Apple account and possibly perform the extra verification
- Navigate to ‘Login and Security’
- Open ‘app-specific passwords’
You will then see an overview of apps and services for which you have set a password. By clicking on the min button you can remove the password. This will log out in the app to which this password is linked. With the ‘withdraw everything’ button you can remove all app-specific passwords.
Limitations and why it is safe
In total you can generate 25 app-specific passwords. You therefore have to remove old in time via the above steps. It is good that app-specific passwords are mandatory in some situations. In the Apple environment, Apple itself is in control over your account and will protect them as well as possible. If you log in with your iCloud account into, for example, an app of third party, your data is ‘less safe’. By using an app-specific password, this app cannot find out your password and stays safe with yourself.
More info about the app-specific passwords can be found on one Special Apple Support page