Apple ID question

Morbier

From time to time, I change my Apple ID password.  I have 3 Apple devices and yesterday changed my password using my laptop. Does this mean my other 2 devices are still logged in via the old password?  Should I log out and log back in using my new password on my other devices?  

As you can see, I am a complete non-techie so apologies if this is a stupid question!

Blackbeard_of_Perranporth

If you go to icloud settings on the web, you can view your devices. Also a good idea to set up two factor authorisation as well!
https://www.icloud.com/settings/

Morbier

Blackbeard_of_Perranporth said:

If you go to icloud settings on the web, you can view your devices. Also a good idea to set up two factor authorisation as well!
https://www.icloud.com/settings/

Yes, I did that and could see my devices.  Do you mean that if I can see my devices, then they're all logged in with the new password?  Sorry, but you haven't really answered my question!

Yes, I've enabled 2FA which I really don't understand either.  You have to wait for a code to be sent before you can log in. The code appears on all my devices!  So if I'm logging in on my phone, it appears on my phone. I thought the idea was that the code was sent to a separate device?

Willberry

Your devices are logged in with the password that was entered at time of log in. After that you simply remain 'logged in'. Should you become logged out (for whatever reason) you will then need to log back in with your new password. Obviously if you changed your password for a specific reason then it's good practice to to log out then log back in on all your devices.

Morbier

Willberry said:

Your devices are logged in with the password that was entered at time of log in. After that you simply remain 'logged in'. Should you become logged out (for whatever reason) you will then need to log back in with your new password. Obviously if you changed your password for a specific reason then it's good practice to to log out then log back in on all your devices.

Thank you. I'll do that. 

mrochester

Morbier said:

Blackbeard_of_Perranporth said:

If you go to icloud settings on the web, you can view your devices. Also a good idea to set up two factor authorisation as well!
https://www.icloud.com/settings/

Yes, I did that and could see my devices.  Do you mean that if I can see my devices, then they're all logged in with the new password?  Sorry, but you haven't really answered my question!

Yes, I've enabled 2FA which I really don't understand either.  You have to wait for a code to be sent before you can log in. The code appears on all my devices!  So if I'm logging in on my phone, it appears on my phone. I thought the idea was that the code was sent to a separate device?

The reason you get the 2FA code on the device you are logging in with is because that device is already secure (locked with a passcode and/or biometrics). Therefore the only reason you could be currently using that device is because you are the person who knows the passcode (i.e., it’s you!). 

Morbier

So what's the point of 2FA?  Sorry to appear thick (again) !

DoaM

When you try to login on another device a 2FA code will be sent to an already logged in device to authorise the new login. (Or, a prompt will appear on the already logged in device to approve the new login).

tempus_fugit

Morbier said:

So what's the point of 2FA?  Sorry to appear thick (again) !

You as the authorised user get any authentication codes on one or other of your logged in devices, but a third party who has, say, guessed or found out your password should theoretically still not be able to log in to your account as they will not receive the requisite authentication code. It’s intended as a second line of defence against being hacked.

Morbier

No, still haven't got it.  I imagine this scenario; someone nicks my iPhone and iPad. If they manage to get past the login password, then 2FA is as much use as a chocolate fireguard.  I know the key phrase is "if they get past my login password" but I can't see what extra protection I get!  If they only pinched one device and tried to log in to my Apple ID, I would see the 2FA notification code on the other device. But by that time, I would have remotely wiped the stolen device anyway?

DoaM

You're right - you haven't got it.
If someone nicks your iPhone and/or iPad then their first challenge is to bypass the lockscreen. IF they manage that then yes - they potentially have access to an authenticated device. By the same token, if you knew those devices were stolen/lost then you would log them out of your Apple account (via another device/PC) and so they wouldn't be able to access your account.