icloud integration is useless if you use security keys on your apple ID

[zappydood]

Feedback

You guys don't have it included in the faq that only people without security keys on their account can add the icloud integration which honestly I figured would be an issue but yet the only thing that it says in the documentation is its possible to use with two factor authentication. Well, the security key is two factor authentication, its just using webauth. I think it would be a great addition to allow the login with my security key but home assistant clearly doesnt let that happen. I'm wondering if an app-specific password would work in its place like it does for icloud mail, but I guess I will try that. Please add in the security key support, honestly I am surprised that home assistant hasnt given us the ability to use them when signing into our home assistant server anyway, that would definitely increase the security by a lot, especially regarding nabucasa cloud..

URL

https://www.home-assistant.io/integrations/icloud/

Version

2024.1.5

Additional information

/ /

[home-assistant[bot]]

Hey there @quentame, @nzapponi, mind taking a look at this feedback as it has been labeled with an integration (icloud) you are listed as a code owner for? Thanks!

Code owner commands

Code owners of `icloud` can trigger bot actions by commenting: - `@home-assistant close` Closes the feedback. - `@home-assistant rename Awesome new title` Renames the feedback. - `@home-assistant reopen` Reopen the feedback. - `@home-assistant unassign icloud` Removes the current integration label and assignees on the feedback, add the integration domain after the command. - `@home-assistant add-label needs-more-information` Add a label (needs-more-information) to the feedback. - `@home-assistant remove-label needs-more-information` Remove a label (needs-more-information) on the feedback.

[zappydood]

Just wanting to include an update: I can't use app-specific passwords with it either, as it still asks me for a otp code I have no way of providing. I'm pretty sure this is an apple-problem and not a home assistant problem but I wanted to at least give an update on this since it doesn't work with app-specific login. Which is ODD, I can sign in my icloud email address onto a linux mail client no problem and bypass the need for the otp code because it lets me insert my security code in the pop up window. Maybe if Evolution (mail client) can add that option in, then home assistant could as well at some point? That would be nice.

[CosticaPuntaru]

+1 i get the "iCloud verification code" but the code doesn't show up on any of my apple device, nor mail or SMS, maybe homeassistant forgets to call something that triggers it?

running: Core 2024.1.6 Supervisor 2023.12.1 Operating System 11.4 Frontend 20240104.0

[pavelhegr]

+1 no verification code received, security keys enabled, app-specific password doesn't work either. running the latest version.

[lzthqx]

Also seeing this same behavior. Using YubiKey 2fa auth, no verification code received.

[weilhr]

+1 same situation as pavelhegr and lzthqx are describing

[zappydood]

The only possible way to do it for those with hardware security keys is to go and remove all security keys from your account, sign in with it as you will be getting your verification codes the normal way, and then once done and its signed in you will then want to add them back to your apple account.

This is what I have had to do with other things apple-based, but with this I have not done it because I've already had to remove my keys like 5 times and I don't really like doing it a sixth nor do I feel like it given that the 4 I have mean I have two that are in difficult places to just go get for something like this. Apple really should modernize their apple services for those that have security keys because this type of thing is so annoying we are told to authenticate but not be able to. And I say this as a person that had to remove hardware security keys from my account while on an apple support call for homekit issues. They kept telling me to go to my icloud settings and click the generate verification code but the generation of a verification code is unavailable when you use security keys - which is ridiculous if they provide no way to login to certain things or anything. The support agent kept telling me well you should be able to generate the verification codes regardless, but the reality is that isn't the case, its missing from settings. Really dumb decision they made with their integration of hardware security keys. Who the heck advised that? Was a wonderful idea on their part... 🙄

Really just wondering if there is another way around this but for now I gave up on it as icloud isn't 100% needed but it would be nice either way...also removal of security keys I feel would be a short-term solution to having to do it again in the future for potential re-authentications... and so that turns me away even more from doing so..

[jchrismills]

I have 3 keys on my account and was prompted to allow and with security codes on trusted devices. No issues. Running iOS 17.5.1, dev beta

[lucaquerella]

Hello. I'm facing the same issue. Has anyone discovered a solution? I'm using version 17.5.1.

[CosticaPuntaru]

the way i am fixing this is remove the integration and add it back, the entities are fine after re creating integration

[InjectMeneer]

I've just talked to the Apple Service desk. They're confirming that the 2FA isn't in any way linked to the app specific passwords. Therefore the integration asking for 2FA is really irrelevant.

Do note: When using my iCloud credentials, i'm still getting the 2FA pop-up's on all of my Apple devices. So there's no issue there. It just gets really annoying when the pop-up's keep popping up, and the emails are pouring in.

[aries223]

Same problem here...