You should really be using two-factor authentication for all your important accounts. An extra layer of security, with a six-digit passcode that’s refreshed every 30 seconds, is essential to keeping your digital accounts safe. But the question is how to do it in a way that’s actually easy to use.
There are plenty of options (Bitwarden and 1Password both have great two-factor authentication features built in), but these apps are paid and, ultimately, third-party options rather than a built-in tool on our devices. macOS Sequoia’s new Passwords app offers a one-stop shop for managing all your passwords. Plus, there’s now a dedicated section that shows all your two-factor codes together, just like a third-party app like 1Password. This will make it easier to use two-factor codes even if you’re not using the Safari app.
This feature syncs across all your devices using iCloud, so any two-factor codes on your iPhone will be available on your Mac, and vice versa. (Here’s how to use two-factor for iPhone and iPad .) And if you use Safari, you can enter two-factor authentication codes just by using Touch ID, without having to dig into a password manager app.
How to Set Up Two-Factor Authentication on Mac
Setting up two-factor authentication on macOS is easy: you can scan a QR code for automatic setup or enter a code manually, and you’re good to go. The process is the same for most websites, apps, and services. In this example, I’ll use a Microsoft account in the Safari browser. You’ll first need to add the website login to the Passwords app (save it to iCloud).
To get started, open the website and look for the two-factor authentication feature in Settings. In your Microsoft account, go to Security > Manage how I log in > Enter a code from an authenticator app to start.
You will see a new page to set up the authenticator app. It will be similar no matter which service you are using. The default option is to scan a QR code for automatic setup. Don’t worry, you don’t need to use a camera to scan this QR code. This feature is used as an express setup, to automatically link your account to the Passwords app. If you want to do it manually, you will also find an option that says “I can’t scan the barcode.“This will give you a numeric code that you can enter on the Passwords app login page.
In this case, I focus on the QR code configuration. Simply right-click on the QR code and choose the option Set up verification code option.
This will open the Passwords app. Enter your device password here or use Touch ID to unlock the app.
The Passwords app will now ask you to choose the login to associate two-factor authentication with. Use the search bar to find the appropriate account, then click Add verification code button.
Two-factor authentication will be instantly associated and you will see a new Verification Code section in the account details. You can click on the code to copy it to your clipboard.
Now go back to the website, paste this code in the section and follow the steps on the website.
And that’s it. Your two-factor code will be added to your account.
How to Log in Using Two-Factor Authentication on Mac
If you’re using Safari, you don’t need to search for verification codes: Safari will automatically fill them in for you. The next time you log in to the site and arrive at the verification page, just use Touch ID to log in.
Using a different browser? It’s still pretty easy to find two-factor codes. Open the Passwords app, log in, and go to Codes section in the sidebar. Here you will see all your two-factor codes in a simple list. You can right-click on any code to quickly copy it to your clipboard.
How to Remove Two-Factor Authentication on Mac
If you no longer want to use two-factor authentication for a website, you can remove it from the Passwords app. First, make sure to turn it off on the website itself (as it may require you to enter a verification code).
Next, go to the Passwords app, search for the website in question, and click the “To modify“. In the Verification Code section, click the “Remove verification code“, and in the confirmation window, choose “Remove verification code” again. The two-factor authentication section will now disappear.