# I pit Apple. MotherFuckingAppleID, forcing a password change **URL:** \ **Category:** The BBQ Pit\ **Created:** [April 9, 2021, 5:26am UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657 "2021-04-09T05:26:54Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![Bullitt](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bullitt/32/5725_2.png) [@Bullitt](https://boards.straightdope.com/u/Bullitt)\ **Post date:** [April 9, 2021, 5:26am UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657/1 "2021-04-09T05:26:54Z")
I usually stay out of the pit. Not today. I need to rant a little. I pit Apple. MotherFuckingAppleID. I just went to log in to my Apple ID. I enter user name and my standard password. **uName** and **pwStd** (password-standard, my shorthand for my notes). Apple then does its two-factor authentication but, and get this, stupid Apple sends the 6-digit code _to the very device I am using!_ It doesn’t send it to my email, or to my phone. It displays it right on this device. The fuckingIDIOTS! _ **==\> Pit reason #1.** _ Yeah, fucking geniuses, I feel really confident you morons can protect my account and data. Stupid. I enter the 6 digits, and the next form that displays is requiring me to change my password. But I don’t want to change my password. I like my password! So I cancel out and I try it again. Sure enough, 2-factor auth does the same stupid thing, and then I still land at the same required password change form. I don’t change it. I do a quick search, and from some brief reading it looks like I must change it, there’s no way around this. I’ve been an Apple user for 15+ years. Never had to do this before. Now, realize that my current **pwStd** is a good one. It has upper and lower cases, numbers, and special characters. And it is 15 characters long. I have it committed to memory, I like it, and **I Don’t Want To Change It.** But Apple says Dear Bullitt, you are fucked, you are forced to change it. _ **==\> Pit reason #2.** _ So I change my password, and I do so by taking my standard password and appending to the end of it a helpful and descriptive phrase. I choose to append this — **fuckingAppleIsPissingMeOff!** Including the “!”. Yeah, I can remember that. Easily. So where my prior password was , my new password is now _ **fuckingAppleIsPissingMeOff!** _ (emphasis mine) In my notes (electronic of course), I never write the entire password. I only wrote “pwStd_ **fuckingAppleIsPissingMeOff!** _ “ Without the quotes. I figure I’m pretty safe that way. I can remember pwStd. And **fuckingAppleIsPissingMeOff!** is easy to remember. So. Password changed. I should be good, right? Noooooo… I log in with my new password. **IT FAILS.** I cannot get into my account. I think I’m royally fucked. I try it again. And again. I’m fucked. Apple fucked me. _ **==\> Pit reason #3.** _ So yeah. **I pit Apple. MotherFuckingAppleID!** ---
**Author:** ![Bullitt](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bullitt/32/5725_2.png) [@Bullitt](https://boards.straightdope.com/u/Bullitt)\ **Post date:** [April 9, 2021, 5:27am UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657/2 "2021-04-09T05:27:18Z")
But this story ends well, because while I was writing this OP I went over to my Apple ID logon again. Lo and behold, it now works! Apparently Apple’s system needed a little time to update. I am in. (Whew!) But still _ **I pit Apple. MotherFuckingAppleID.** _ ---
**Author:** ![Senegoid](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/senegoid/32/6606_2.png) [@Senegoid](https://boards.straightdope.com/u/Senegoid)\ **Post date:** [April 9, 2021, 7:16am UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657/3 "2021-04-09T07:16:35Z")
The next time I don’t buy any Apple product or service, I’ll be sure to let them know that Bullitt offered me this insightful advice! Thanks, @Bullitt for the heads-up. (As if I was ever going to buy anything from Apple anyway.) ---
**Author:** ![nightshadea](https://avatars.discourse-cdn.com/v4/letter/n/7ba0ec/32.png) [@nightshadea](https://boards.straightdope.com/u/nightshadea)\ **Post date:** [April 9, 2021, 9:16am UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657/4 "2021-04-09T09:16:01Z")
didn’t some apple service has a huge data breach recently? I don’t remember since I don’t pay much attention to apple anything, But yeah a few years ago bank of america made me change atm cards 3 different times because of a data steal and I had to change a lot of things to the point I started using autofill so I only had to change it once … ---
**Author:** ![Ike\_Witt](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ike_witt/32/283_2.png) [@Ike\_Witt](https://boards.straightdope.com/u/Ike_Witt)\ **Post date:** [April 9, 2021, 12:52pm UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657/5 "2021-04-09T12:52:40Z")
You’re upset that you’ve been forced to change your password once in 15 years? ---
**Author:** ![naita](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/naita/32/5862_2.png) [@naita](https://boards.straightdope.com/u/naita)\ **Post date:** [April 9, 2021, 1:00pm UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657/6 "2021-04-09T13:00:40Z")
He was probably a bit on edge due to some kids being on his lawn earlier. ---
**Author:** ![Dewey\_Finn](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dewey_finn/32/4222_2.png) [@Dewey\_Finn](https://boards.straightdope.com/u/Dewey_Finn)\ **Post date:** [April 9, 2021, 1:03pm UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657/7 "2021-04-09T13:03:36Z")
> [@Bullitt](#): > > Apple then does its two-factor authentication but, and get this, stupid Apple sends the 6-digit code _to the very device I am using!_ It doesn’t send it to my email, or to my phone. It displays it right on this device. The fuckingIDIOTS! _ **==\> Pit reason #1.** _ As for that, I think it’s up to you what number or email address they use for the two-factor authentication and you can certainly choose a different phone. ---
**Author:** ![AHunter3](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ahunter3/32/368_2.png) [@AHunter3](https://boards.straightdope.com/u/AHunter3)\ **Post date:** [April 9, 2021, 3:22pm UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657/8 "2021-04-09T15:22:08Z")
They are the most annoying out of a whole parcel of “you must change your password” vendors. for presumably obvious reasons I’m not giving out my Apple ID password here, but I will tell you that it is something along the lines of %$&2334etg9q3wetg is still my motherfucking password because I’d memorized an arcane string of characters and didn’t feel like dustbinning that and starting over. But they accept entire sentences as passwords. ---
**Author:** ![Spice\_Weasel](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/spice_weasel/32/5435_2.png) [@Spice\_Weasel](https://boards.straightdope.com/u/Spice_Weasel)\ **Post date:** [April 9, 2021, 9:00pm UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657/9 "2021-04-09T21:00:58Z")
I can’t endorse this Pitting hard enough. Did you know that if you don’t own a second Apple device you have to wait two goddamn weeks to reset your password? Did you know that the worst possible time to have that happen is when you’re trying to schedule a service appointment? 🤬🤬🤬 ---
**Author:** ![FordPrefect](https://avatars.discourse-cdn.com/v4/letter/f/e99b99/32.png) [@FordPrefect](https://boards.straightdope.com/u/FordPrefect)\ **Post date:** [April 9, 2021, 9:35pm UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657/10 "2021-04-09T21:35:44Z")
That happened to a co-worker… with his work phone. Never send a kid’s toy to do a grown-up’s job. ---
**Author:** ![Bullitt](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bullitt/32/5725_2.png) [@Bullitt](https://boards.straightdope.com/u/Bullitt)\ **Post date:** [April 9, 2021, 11:04pm UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657/11 "2021-04-09T23:04:12Z")
> [@Dewey\_Finn](#): > > > [@Bullitt](#): > > > > Apple then does its two-factor authentication but, and get this, stupid Apple sends the 6-digit code _to the very device I am using!_ It doesn’t send it to my email, or to my phone. It displays it right on this device. The fuckingIDIOTS! _ **==\> Pit reason #1.** _ > > As for that, I think it’s up to you what number or email address they use for the two-factor authentication and you can certainly choose a different phone. They have my email. Instead of sending the verification code there, they pop it on the very device being used. Bad form. ---
**Author:** ![Richard\_Pearse](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/richard_pearse/32/13144_2.png) [@Richard\_Pearse](https://boards.straightdope.com/u/Richard_Pearse)\ **Post date:** [April 11, 2021, 7:38pm UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657/12 "2021-04-11T19:38:48Z")
> [@Bullitt](#): > > They have my email. Instead of sending the verification code there, they pop it on the very device being used. Can you access email on your phone? ---
**Author:** ![Bullitt](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bullitt/32/5725_2.png) [@Bullitt](https://boards.straightdope.com/u/Bullitt)\ **Post date:** [April 11, 2021, 8:43pm UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657/13 "2021-04-11T20:43:38Z")
> [@Richard\_Pearse](#): > > > [@Bullitt](#): > > > > They have my email. Instead of sending the verification code there, they pop it on the very device being used. > > Can you access email on your phone? Good point. ---
**Author:** ![wguy123](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/wguy123/32/3161_2.png) [@wguy123](https://boards.straightdope.com/u/wguy123)\ **Post date:** [April 11, 2021, 9:05pm UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657/14 "2021-04-11T21:05:31Z")
A lot of MFA factors pop-up on the device you are using. There are good ways to do MFA and less good ways. They are all better than no MFA. ---
**Author:** ![DorkVader](https://avatars.discourse-cdn.com/v4/letter/d/73ab20/32.png) [@DorkVader](https://boards.straightdope.com/u/DorkVader)\ **Post date:** [April 12, 2021, 7:15am UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657/15 "2021-04-12T07:15:24Z")
as a new apphell clone myself, I’ve discovered the phones at least do not have a learning curve, it goes straight up. One thing I did discover though is that you can have “trusted numbers” and that whilst password wrangling you can have the tfa sent to one of those as an alternate. apphell really likes it when it’s another apphell device. “Trust me,_I know_” ---
**Author:** ![BigT](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bigt/32/12044_2.png) [@BigT](https://boards.straightdope.com/u/BigT)\ **Post date:** [April 12, 2021, 7:33am UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657/16 "2021-04-12T07:33:11Z")
> [@wguy123](#): > > A lot of MFA factors pop-up on the device you are using. There are good ways to do MFA and less good ways. They are all better than no MFA. There are some cases where I would say same-device MFA is useful. These would be when it’s being used to verify that you have access to that device. However, such isn’t really necessary with an Apple device, since it can tell if you’re using the same iPhone. In this case, it seems it’s more of a one-size-fits-all approach. They use the same MFA no matter how you access your account. It would mainly be useful if you try to manage your AppleID account on a computer. It would be better if it just forced you to use the fingerprint system to access the account. Then, even though it send the request to the same device, you still have to have something extra (your fingers) to use it. Of course, they could just use the biometric settings as the password to begin with, and keep it encrypted well enough that a breach isn’t a problem. ---
**Author:** ![nightshadea](https://avatars.discourse-cdn.com/v4/letter/n/7ba0ec/32.png) [@nightshadea](https://boards.straightdope.com/u/nightshadea)\ **Post date:** [April 12, 2021, 8:24am UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657/17 "2021-04-12T08:24:08Z")
it could be worse … your bank’s idea of fixing a data breach is sending you a new atm card with a new number and a new pin… the first time I was merely annoyed … When it was the 3rd time in 8 weeks i was homicidal and I just use PayPal or my bank account number on everything that accepts it so I don’t have to change it on 30 accounts … ---
**Author:** ![Broomstick](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/broomstick/32/246_2.png) [@Broomstick](https://boards.straightdope.com/u/Broomstick)\ **Post date:** [April 12, 2021, 8:40am UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657/18 "2021-04-12T08:40:54Z")
> [@Dewey\_Finn](#): > > As for that, I think it’s up to you what number or email address they use for the two-factor authentication and you can certainly choose a different phone. “Choosing a different phone” only works if you actually have another phone. > [@BigT](#): > > It would be better if it just forced you to use the fingerprint system to access the account. Then, even though it send the request to the same device, you still have to have something extra (your fingers) to use it. Just don’t injure your fingers, ever. ---
**Author:** ![Bullitt](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bullitt/32/5725_2.png) [@Bullitt](https://boards.straightdope.com/u/Bullitt)\ **Post date:** [April 12, 2021, 3:45pm UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657/19 "2021-04-12T15:45:30Z")
> [@nightshadea](#): > > it could be worse … your bank’s idea of fixing a data breach is sending you a new atm card with a new number and a new pin… the first time I was merely annoyed … > > When it was the 3rd time in 8 weeks i was homicidal and I just use PayPal or my bank account number on everything that accepts it so I don’t have to change it on 30 accounts … I have two CCs because of this. One I use for daily purchases, and the other I use only for recurring charge accounts. #1 often gets fraud alerts, as you would expect. It is often changed / replaced by my bank. #2 is stable and changes every 3-5 years. Because of the fraud alerts on #1, I have a backup, so I really have #1a and #1b. ETA — and this topic now connects to another thread, > [@‘Cash is king.’ Oh really? Is it? Do you carry cash? Are you plastic always, all the time?](https://boards.straightdope.com/t/cash-is-king-oh-really-is-it-do-you-carry-cash-are-you-plastic-always-all-the-time/922191/23): > > I’m same as OP, other than not having a special stash of $2s. Cash is for emergencies only. There’s a bigger stash at home for a zombie apocalypse (post-hurricane widespread long-term power outage really), a smaller stash in the car for buying emergency car repairs on the interstate, and a hundred-ish worth in my wallet for CC problems while traveling/working. And I carry multiple CCs to further reduce that latter risk. ---
**Author:** ![TheCuse](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/thecuse/32/2854_2.png) [@TheCuse](https://boards.straightdope.com/u/TheCuse)\ **Post date:** [April 12, 2021, 4:36pm UTC](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657/20 "2021-04-12T16:36:15Z")
> [@Broomstick](#): > > > [@Dewey\_Finn](#): > > > > As for that, I think it’s up to you what number or email address they use for the two-factor authentication and you can certainly choose a different phone. > > “Choosing a different phone” only works if you actually have another phone. Well, why would someone choose a different phone if they didn’t have one? [Next page](https://boards.straightdope.com/t/i-pit-apple-motherfuckingappleid-forcing-a-password-change/939657.md?page=2)