A number of early adopters of iOS 10 have been locked out of their Apple accounts owing to bugs in the early betas. The advice is to turn off two-factor authentication (2FA) to avoid falling victim.
The first part, which the Reddit user later pointed out appears to affect all iOS users, not just those on the beta iOS 10 release, is a bug with app-specific passwords that can force a password reset.
"At approximately 9:50 AM EDT all of my signed-in Apple devices requested that I enter the password in Settings (or System Preferences, respectively). I was told on entering my password that my account had been locked due to security reasons," the Reddit user wrote.
The second and more serious part of the problem is related to Apple’s iForgot password system. This throws up a 'server error' message, leaving users unable to change their password and effectively locked out of the device.
The post continued: "Upon visiting the iForgot page and entering my email, I was greeted with a message saying 'Server error' and ‘Your request could not be completed at this time.'"
Despite Apple’s usual hard line on security, this iOS 10 bug appears to affect only users with 2FA switched on.
"As for the two other people who confirmed to me that they got the security pop-up, one was able to successfully reset their password (due to not having 2FA enabled). The other person and I both had 2FA enabled, and got the ‘Server error’ message," said the Reddit post.
Some in the thread have suggested that it may be wise for other beta users to switch off 2FA until the bug has been squashed, especially given that Apple's Support Twitter account has told users that they are unable to fix the problem.
Another Reddit user pointed out that dialling back to iOS 9 doesn't do much good either. "Same problem here with iOS 10 Beta and getting server error with 2FA. Downgrading didn't help," the post said.
If you’re using 2FA and have yet to sign up to the iOS 10 public beta programme, which launched on Friday, you may want to hold off for now. µ
Wikileaks Vault 7 suspect Joshua Schulte fingered by FBI after re-using smartphone passwords on his PCs
Joshua Schulte indicted on 13 counts relating to Vault 7 leaks and trading in images of child abuse
Alexa for Hospitality will link with existing systems so guests can order room service and control the air con
Massive volcanic eruptions could have warmed Mars' surface sufficiently for oceans to form
Examination of fruit flies' brains generated more than one billion data points for scientists to analyse