The defense, called two-step verification, involves entering a numerical passcode that is sent by SMS to users' phones after they've entered their username and password. AppleApple recommends that users set up two-step verification, although it is not mandatory. Alles zu Apple auf CIO.de
Apple has had a two-step verification feature for iTunes and App Store accounts, but for some reason the same protection wasn't offered for iCloud.
The celebrity iCloud accounts were thought to have been accessed after hackers guessed their usernames and passwords, possibly by answering the security questions Apple poses if someone loses their password.
Apple maintained that its former implementation of two-step verification for certain account changes would have protected the victims, as a code would have been required before someone could even see the security questions.
The company came under enormous pressure after the nude photos were published on various websites. CEO Tim Cook told the Wall Street Journal on Sept. 5 that the company planned to send new warnings when account settings were changed, in addition to two-step verification for iCloud.