Apple suggests a trusted number that isn't inside your iPhone

Apple's advice, verbatim

• Apple Support, on what two-factor needs

  “To use two-factor authentication, you need at least one trusted phone number on file where you can receive verification codes.”

  https://support.apple.com/en-us/122621

• Apple Support, on a second number

  “If you have multiple phone numbers, consider using one not associated with your iPhone as an additional trusted phone number.”

  https://support.apple.com/en-us/122621

The reason is on the same page, and it is a single point of failure: “If your iPhone is your only trusted device and it's the only device that has access to your trusted phone number, you won't be able to receive verification codes required to access your account if it's missing or damaged” (Apple). One object holds the device, the SIM and the codes. Apple is telling you to split them.

How the code arrives

• Apple Support, on getting a code

  “When you sign in, the verification code is displayed automatically on your trusted devices.”

  https://support.apple.com/en-us/102606

• Apple Support, on the number route

  “You'll get a text message or phone call from Apple with your verification code.”

  https://support.apple.com/en-us/102606

So the trusted number is the route that works when the trusted device does not — which is exactly the moment it is needed. Both channels count: a text, or an automated call. A Cleat line receives texts and transcribes incoming calls into the same inbox, which is why verification by phone call is not a dead end here.

The VoIP quote people keep repeating

You will see Apple cited as banning VoIP numbers. Apple did publish that sentence — “You can't use landline or web-based (VOIP) phone services for two-step verification” — on an archived page that Apple marks as no longer updated, describing two-step verification, the system it replaced with two-factor authentication. On Apple's current two-factor pages there is no rule about number type at all; what it publishes is a delivery method, a text or an automated call (Apple).

We are not going to turn that into a promise in either direction. What is checkable is the line: a Cleat number is a real US mobile line rather than an internet one, and what makes a number non-VoIP explains what a check like that actually inspects. What each service publishes collects the rules that genuinely exist, Apple's included.

What happens when both are gone

• Apple Support, on account recovery

  “It might take several days or longer before you can use your account again after you start account recovery.”

  https://support.apple.com/en-us/118574

• Apple Support, on asking for help

  “Contacting Apple Support can't help you shorten this time.”

  https://support.apple.com/en-us/118574

Two more traps on the same page: “Once you start account recovery, don't use your other Apple devices as that might interrupt or delay the recovery process”, and “If your Apple Account is in use during your request, your account recovery will be cancelled automatically” (Apple). For anyone whose photos, purchases, passwords and two-factor for other services all sit behind this account, several days is not an inconvenience — it is the argument for adding the second trusted number while everything still works.

Adding one

From account.apple.com, or from the device you have (Apple):

1. 01On iPhone or iPad: Settings, your name, Sign-In & Security, then Two-Factor Authentication.
2. 02Below the list of devices and numbers, tap Add Trusted Phone Number.
3. 03On the web: sign in at account.apple.com, open Sign-In and Security, then Account Security.
4. 04In the Trusted Phone Number section, add the new one — and only then remove a number you are losing.

Where a Cleat line fits

As the additional trusted number Apple describes: a US mobile line that is not inside the iPhone, reachable from a browser anywhere, so a lost, stolen or dead handset does not take the account with it. It is also the answer for an emigrant whose Apple Account was built on a US number that is about to stop working, and for a household or company where more than one person may need to read a code for a device the business owns. A Cleat line is a real US mobile number, not VoIP, held by one identity-verified person, $24.99 a month. Cleat for expats covers the move; keeping a US number abroad covers what else it carries.

When Cleat is the wrong answer here

• A second Apple Account you are not entitled to. One line, one identity-verified person, one account that is actually theirs.
• Someone else's Apple Account. If you are not the account holder, adding your number to it is not a service we can be part of.
• Speeding up account recovery. Apple says nothing shortens it, including Apple. A new number does not change that.
• Replacing your trusted devices. Keep them. The extra number is a second route, not a substitute.

Keep reading

Google Account · Amazon · ChatGPT · Every service in this section