Apple's revamping their two-factor authentication system in iOS 9 and El Capitan. By leveraging their own ecosystem — they know each and every device they've made — they've replaced the recovery key with the concept of a trusted device.
What do I need to remember when using two-factor authentication?
To keep your account as secure as possible and help ensure you never lose access, there are a few simple guidelines you should follow:
- Remember your password.
- Use a device passcode on all your devices.
- Keep your trusted phone number(s) up to date.
- Keep your trusted devices physically secure.
The benefit of this new system: as long as you have one device you know and trust, you can get access to your account. So even if you forget your password, you'll loose access to your account.
Pretty cool. And super handy for these annoying customers who blame the reseller for their own mistakes.