When Two-Factor Authentication is a Foe: Breaking the iCloud Keychain

Tech 3 (801A) November 14, 2017 1:25 pm - 2:25 pm Feedback     

Bookmark and Share

Vladimir Katalov

Everybody knows about Apple iCloud backups: how to disable this feature, or (if you are on the other side) how to download the data. However, iCloud is not just about backups. There is quite a lot of data that is also being *synced* across all the devices, and as such stored in the iCloud. This includes contacts, calendars, notes, media files, documents, 3rd party application data, and more. iCloud Keychain (that stores your passwords and credit card data) is the most protected data among all other iCloud-synced categories, but still there is a way to break into it by adding yourself into the “circle of trust.” Believe it or not, if you use two-factor authentication, you are *LESS* safe.