[Andrew Brehm]

Last week I found myself away from my phone, iPad and MacBook and needed to find something in my iCloud address book.

So I connected to the iCloud Web site and tried to log in.

It said it would send a message to one of my devices. Since I didn't have any of my devices on me, that didn't help me. And if I had had my devices on me, I wouldn't have had to log in via Web browser.

So how exactly is this supposed to work?

[Tartarus]

Last week I found myself away from my phone, iPad and MacBook and needed to find something in my iCloud address book.

So I connected to the iCloud Web site and tried to log in.

It said it would send a message to one of my devices. Since I didn't have any of my devices on me, that didn't help me. And if I had had my devices on me, I wouldn't have had to log in via Web browser.

So how exactly is this supposed to work?

Apple goes for safety above convenience.
There is nothing else you could have done different.

[Andrew Brehm]

Apple goes for safety above convenience.
There is nothing else you could have done different.

I figured that might be it.

I guess the fact that this locks out non-Apple devices rather well is an added advantage. I have been considering moving away from iCloud ever since the last great renaming.

[Tartarus]

I figured that might be it.

I guess the fact that this locks out non-Apple devices rather well is an added advantage. I have been considering moving away from iCloud ever since the last great renaming.

iCloud is my primary cloud storage service. I wouldn’t dream of moving away from it.

[kataran]

Welcome to iMore Andrew

I prefer iCloud as my cloud service because of there security

[Annie_M]

Welcome to iMore Andrew. Like the others, I prefer iCloud because of the security it offers.

[scruffypig]

I figured that might be it.

I guess the fact that this locks out non-Apple devices rather well is an added advantage. I have been considering moving away from iCloud ever since the last great renaming.

Apple allows iCloud for Windows PCs too.

https://support.apple.com/kb/HT208684

[Annie_M]

Is the fact that you weren't able to successfully log in due to the fact that you are using 2FA and that you neither had your iPhone/iPad and were logging in from a "new to you and untrusted" machine, and you needed your other devices to verify with 2FA?

[Lee_Bo]

Is the fact that you weren't able to successfully log in due to the fact that you are using 2FA and that you neither had your iPhone/iPad and were logging in from a "new to you and untrusted" machine, and you needed your other devices to verify with 2FA?

I would say that's probably correct. Any time I have to log into iCloud from an untrusted machine, my devices get a pop up with a security code.

[Annie_M]

I would say that's probably correct. Any time I have to log into iCloud from an untrusted machine, my devices get a pop up with a security code.

Overall, even though this was a huge nuisance for the OP, in the end, I'm glad for Apple's security!

[Lee_Bo]

Overall, even though this was a huge nuisance for the OP, in the end, I'm glad for Apple's security!

Oh it's a pain. Especially when changing devices. Have to carry my iPad so I can get the security code.

[Andrew Brehm]

I don't think it helps security.

If the Web interface only works when I have one of my devices with me, there is no need to have a Web interface. The Web interface just adds potential security issues and serves no benefit.

[Lee_Bo]

I don't think it helps security.

If the Web interface only works when I have one of my devices with me, there is no need to have a Web interface. The Web interface just adds potential security issues and serves no benefit.

Then as @scruffypig posted above, install iCloud for Windows.

The bottom line is, Apple is all about security. So you have 2 options:
1) Use it
2) Don't use it

[Andrew Brehm]

Then as @scruffypig posted above, install iCloud for Windows.

That doesn't solve the problem.

The bottom line is, Apple is all about security. So you have 2 options:
1) Use it
2) Don't use it

No. You don't get it. As I said above, offering a Web interface that can only be used when a device that can access iCloud is around, is actually _LESS_ secure than not offering a Web interface.

So, no, Apple is not "all about security". Apple offer more attack surface than necessary for the feature set they offer. That is the opposite of being "all about security".

[Lee_Bo]

From your OP:

Last week I found myself away from my phone, iPad and MacBook and needed to find something in my iCloud address book. So I connected to the iCloud Web site and tried to log in.

So what did you use to connect to the iCloud website?

From my Windows laptop with iCloud installed, I can open iCloud with my credentials (without any iOS/MacOS/WatchOS/tvOS) device and go right to my contacts.

So from my point of view, yes that did solve the issue in your OP.

[Golfdriver97]

I can only make an observation based on my Chrome/Chrome OS experience. If I log into chrome from a different computer, I get a notification on my phone. If I don't authorize the action, nothing will happen. However, as long as I set up the new computer as a device that is mine, I have no trouble afterwards.

I'm guessing Apple is the same way.

This IS a security measure. If somehow your ID and password are compromised, this is a way for the site to determine if you are really who you claim to be.

[Andrew Brehm]

From your OP:


So what did you use to connect to the iCloud website?

From my Windows laptop with iCloud installed, I can open iCloud with my credentials (without any iOS/MacOS/WatchOS/tvOS) device and go right to my contacts.

So from my point of view, yes that did solve the issue in your OP.

I don't remember what it was in that specific instance. I think it was a Windows laptop. Basically, I need to use the Web interface whenever I don't have any of my iCloud-connected devices with me. (When I have one of my iCloud-connected devices with me, I use that.)

[Andrew Brehm]

I can only make an observation based on my Chrome/Chrome OS experience. If I log into chrome from a different computer, I get a notification on my phone. If I don't authorize the action, nothing will happen. However, as long as I set up the new computer as a device that is mine, I have no trouble afterwards.

I'm guessing Apple is the same way.

This IS a security measure. If somehow your ID and password are compromised, this is a way for the site to determine if you are really who you claim to be.

I can open Gmail from any computer. I think it does send a notification to my Android phone. But the site works when I am away from my phone. Same with outlook.com.

[scruffypig]

That doesn't solve the problem.



No. You don't get it. As I said above, offering a Web interface that can only be used when a device that can access iCloud is around, is actually _LESS_ secure than not offering a Web interface.

So, no, Apple is not "all about security". Apple offer more attack surface than necessary for the feature set they offer. That is the opposite of being "all about security".

Apple offers iCloud control panel software for Windows computers. The control panel is integrated with your Windows Outlook, photos, One Drive, etc. This isn’t the iCloud web page.

https://support.apple.com/en-us/HT204283

[Andrew Brehm]

Apple offers iCloud control panel software for Windows computers. The control panel is integrated with your Windows Outlook, photos, One Drive, etc. This isn’t the iCloud web page.

https://support.apple.com/en-us/HT204283

And...?

[Tartarus]

I can open Gmail from any computer. I think it does send a notification to my Android phone. But the site works when I am away from my phone. Same with outlook.com.

If I don’t have my iPhone with the Google Authenticator app on it with me, I can’t access Gmail or any other Google services.
Same goes for Hotmail and some other apps I have on my phone.

2FA is meant to make it impossible for people without access to the iPhone to access your account, be it Apple, Google or some other service.

If you by any chance don’t have your iPhone with you, you can’t prove it’s you that wants access.

Yes, 2FA is highly inconvenient if you don’t have the authenticator app or iPhone with you, but sure is much safer than not having 2FA enabled.

[Andrew Brehm]

If I don’t have my iPhone with the Google Authenticator app on it with me, I can’t access Gmail or any other Google services.
Same goes for Hotmail and some other apps I have on my phone.

2FA is meant to make it impossible for people without access to the iPhone to access your account, be it Apple, Google or some other service.

If you by any chance don’t have your iPhone with you, you can’t prove it’s you that wants access.

Yes, 2FA is highly inconvenient if you don’t have the authenticator app or iPhone with you, but sure is much safer than not having 2FA enabled.

No doubt, but that is not the point.

If the Web interface can only be used when one has one of the iCloud-enabled devices on oneself, the Web interface is useless.

With Gmail and Hotmail I can use the Web interface without 2FA. With iCloud I had to enable 2FA because otherwise it would not allow me to use non-Apple devices to access iCloud. (And the Web interface refuses to run on Android browsers too.)

If security were the real goal here, there would be no Web interface that cannot be used unless one has a device that can access iCloud without the Web interface. The existence of a Web interface is a security risk. The existence of a useless Web interface is an unnecessary security risk.

[Tartarus]

No doubt, but that is not the point.

If the Web interface can only be used when one has one of the iCloud-enabled devices on oneself, the Web interface is useless.

With Gmail and Hotmail I can use the Web interface without 2FA. With iCloud I had to enable 2FA because otherwise it would not allow me to use non-Apple devices to access iCloud. (And the Web interface refuses to run on Android browsers too.)

If security were the real goal here, there would be no Web interface that cannot be used unless one has a device that can access iCloud without the Web interface. The existence of a Web interface is a security risk. The existence of a useless Web interface is an unnecessary security risk.

I just tried and both Gmail and Hotmail asked me to enter a verification code from an authenticator app. Not sure why both services don’t require it with you. Perhaps you simply haven’t enabled 2FA for those services.

You see the web interface as a stand alone service, while I consider it a extension of the iPhone or any other iDevice.

[scruffypig]

And...?

“With iCloud for Windows, you’ll have your photos, videos, mail, calendar, files, and other important information on the go and on your Windows PC.”

[Lee_Bo]

I don't remember what it was in that specific instance. I think it was a Windows laptop. Basically, I need to use the Web interface whenever I don't have any of my iCloud-connected devices with me. (When I have one of my iCloud-connected devices with me, I use that.)

Well a specific example would help, otherwise we're all just going around in circles.