iOS 16.3 and macOS Ventura 13.2 Add Hardware Security Key Support

Apple released iOS and iPadOS 16.3, macOS Ventura 13.2, and watchOS 9.3 today. The updates focus primarily on bug fixes and under-the-hood improvements, but there is one notable addition: Apple ID got support for hardware security keys. From a report: Once they've updated to the new software, a user can opt to make a device like a YubiKey a required part of the two-factor authentication process for their account. It's unlikely most users will take advantage of this, of course, but for a select few, the extra security is welcome. Other additions in iOS 16.3 include support for the upcoming new HomePod model, a tweak to how Emergency SOS calls are made, and a new Black History Month wallpaper. On the Mac side, hardware security key support is joined by the rollout of Rapid Security Response, a means for urgent security updates to be delivered to Macs without issuing a major software update. The watchOS update is oriented around bug fixes.

2FA

[Rick Zeman]

I want my PHONE to have 2FA. I want it to use a biometric factor (FaceID/fingerprint depending on my device; eg, what I am) AND a code (what I know). The account change here is less consequential as already have other 2FA implemented on that.

Re:

[DarkRookie2]

How is that going to work when the phone is the security device?

Re:

[AmiMoJo]

Had this for a few years on Android. It works fine, if you lose the phone you use your backup codes or another key. Half decent sites let you set up multiple 2FA options, so you aren't reliant on just one thing.

It's not really to do with phones, you could lose a discrete key too. Obviously that is factored into the system so you don't lose access.

Re:

[Rick Zeman]

This is only to log into the phone itself. Its use as a security device for external sites would work as normal/or YubiKeyed like this article mentions.

Re: 2FA

[fbobraga]

Android doesn't implement that?

Re:

[skegg]

I want my PHONE to have 2FA. I want it to use a biometric factor (FaceID/fingerprint depending on my device; eg, what I am) AND a code (what I know). The account change here is less consequential as already have other 2FA implemented on that.

+1 Like
Yes ! That's crossed my mind in the past, and I'd also use the sample combinations you mentioned: Face Id (or fingerprint) + short code (3 or 4 numerals).
Doubt we'll get it with the current 2 mobile OS leaders.

All well and good

[DarkRookie2]

But those keys are expensive. And not one work on all devices. And my understanding is that you don't use them often, so you have a solid chance of losing the device, or it just sits in the USB port kinda defeating the purpose?

Re:

[DarkRookie2]

Found the racist.

Re:

[Osgeld]

yea cause black history month doesn't start in a few days or anything

racist

Firefox doesn't work with this...

[rgomezc]

You can't use Firefox with the security keys to login into Apple sites... I can use my Yubikeys in Firefox on my Mac without problems in other sites... but Apple says that browser is not supported. Hopefully they will fix this soon.... Chrome works, so it's not that they are forcing Safari for this feature to work... I haven't tried from a PC.