Get two-factor authentication code from terminal

bashterminaltwo-factor-authentication

Is it possible to retrieve my Apple ID two-factor authentication code via the terminal instead of the GUI prompt, i.e. via ssh or a bash script?

I don't own any Apple devices other than a headless Mac mini for iOS development (I am loaning some iOS devices for development, but don't want to mark those as trusted, for obvious reasons).

Right now, I have to remote desktop into the Mac mini to get the 2FA code whenever I need it. I'd like to be able to at least just ssh, if not set up a bash script to text me when prompted.

Best Answer

I came up with a pretty simple solution to this problem using AppleScript that should print the 2FA code:

#! /usr/bin/env osascript tell application "System Events" if name of every process contains "FollowUpUI" then tell window 1 of process "FollowUpUI" click button "Allow" delay 2 set code to value of static text 1 of group 1 log (code) click button "Done" end tell else log ("Couldn't find 2FA window") end if end tell return

Adding this to a file and making it executable using chmod +x name_of_file.scpt should create a script that can be run over ssh by executing ./name_of_file.scpt while in the same directory as the file.

Note: When you run this script over ssh for the first time, the following popup should appear:

Simply clicking "OK" should allow the script to run properly. This preference will automatically be saved, and can be modified by going into System Preferences->Security & Privacy->Privacy->Accessibility

This worked for me on macOS Mojave, but it may work on other versions as well.

Related Solutions

ICloud – Apple Two Factor Authentication: why verification code popup don’t display

When you restore a device, it is removed from the trusted device list in case you want to sell it. Here's how you can add the iPhone back to the list:

Go to appleid.apple.com and sign in.

Under security, go to Trusted Devices.

Refresh devices then follow directions to confirm your device.

Remove your unused versions of devices.

You will only be able to receive codes on your iPhone, not your mac.

MacOS – Disable Two-Factor Authentication for macOS

Two-Factor Authentication is applied at the account level, not at the device level. So you can either remove it entirely from your iCloud account, or you’ll have to use it on all of your devices equally.

If it worked any other way a hacker could simply pick the least secure entry point to attack your account.

Thankfully you can still login on an older device, even with Two-Factor Authentication enabled.

First, login using your regular credentials, just as you would on a system that did support Two-Factor Authentication. An authentication code will be sent to all your Trusted Devices. Now simply login again, this time appending your authentication code to your password.

For instance if your account is basil@icloud.com, your password 123apple and your authentication code 456789, then you would login using the following credentials:

basil@icloud.com  
123apple456789

You can read up more about this at Two-factor authentication for Apple ID:

What if I use two-factor authentication on a device running older software?

If you use two-factor authentication with devices running older OS versions, you might be asked to add your six-digit verification code to the end of your password when signing in. Get your verification code from a trusted device running iOS 9 and later or OS X El Capitan and later, or have it sent to your trusted phone number. Then type your password followed by the six-digit verification code directly into the password field.

Apple also provides a few additional methods to Get a verification code and sign in with two-factor authentication.

Best Answer

Related Solutions

ICloud – Apple Two Factor Authentication: why verification code popup don’t display

MacOS – Disable Two-Factor Authentication for macOS

What if I use two-factor authentication on a device running older software?

Related Question