Skip to content

icloud integration is useless if you use security keys on your apple ID #30965

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
zappydood opened this issue Jan 21, 2024 · 22 comments
Open
Assignees

Comments

@zappydood
Copy link

Feedback

You guys don't have it included in the faq that only people without security keys on their account can add the icloud integration which honestly I figured would be an issue but yet the only thing that it says in the documentation is its possible to use with two factor authentication. Well, the security key is two factor authentication, its just using webauth. I think it would be a great addition to allow the login with my security key but home assistant clearly doesnt let that happen. I'm wondering if an app-specific password would work in its place like it does for icloud mail, but I guess I will try that. Please add in the security key support, honestly I am surprised that home assistant hasnt given us the ability to use them when signing into our home assistant server anyway, that would definitely increase the security by a lot, especially regarding nabucasa cloud..

URL

https://www.home-assistant.io/integrations/icloud/

Version

2024.1.5

Additional information

/
/
Screenshot 2024-01-20 at 22 39 30

@home-assistant
Copy link

Hey there @Quentame, @nzapponi, mind taking a look at this feedback as it has been labeled with an integration (icloud) you are listed as a code owner for? Thanks!

Code owner commands

Code owners of icloud can trigger bot actions by commenting:

  • @home-assistant close Closes the feedback.
  • @home-assistant rename Awesome new title Renames the feedback.
  • @home-assistant reopen Reopen the feedback.
  • @home-assistant unassign icloud Removes the current integration label and assignees on the feedback, add the integration domain after the command.
  • @home-assistant add-label needs-more-information Add a label (needs-more-information) to the feedback.
  • @home-assistant remove-label needs-more-information Remove a label (needs-more-information) on the feedback.

@zappydood
Copy link
Author

Just wanting to include an update: I can't use app-specific passwords with it either, as it still asks me for a otp code I have no way of providing. I'm pretty sure this is an apple-problem and not a home assistant problem but I wanted to at least give an update on this since it doesn't work with app-specific login. Which is ODD, I can sign in my icloud email address onto a linux mail client no problem and bypass the need for the otp code because it lets me insert my security code in the pop up window. Maybe if Evolution (mail client) can add that option in, then home assistant could as well at some point? That would be nice.

@CosticaPuntaru
Copy link

CosticaPuntaru commented Feb 5, 2024

+1 i get the "iCloud verification code" but the code doesn't show up on any of my apple device, nor mail or SMS, maybe homeassistant forgets to call something that triggers it?

running:
Core
2024.1.6
Supervisor
2023.12.1
Operating System
11.4
Frontend
20240104.0

@pavelhegr
Copy link

+1 no verification code received, security keys enabled, app-specific password doesn't work either. running the latest version.

@lzthqx
Copy link

lzthqx commented Feb 18, 2024

Also seeing this same behavior.
Using YubiKey 2fa auth, no verification code received.

@weilhr
Copy link

weilhr commented Mar 30, 2024

+1 same situation as pavelhegr and lzthqx are describing

@zappydood
Copy link
Author

The only possible way to do it for those with hardware security keys is to go and remove all security keys from your account, sign in with it as you will be getting your verification codes the normal way, and then once done and its signed in you will then want to add them back to your apple account.

This is what I have had to do with other things apple-based, but with this I have not done it because I've already had to remove my keys like 5 times and I don't really like doing it a sixth nor do I feel like it given that the 4 I have mean I have two that are in difficult places to just go get for something like this. Apple really should modernize their apple services for those that have security keys because this type of thing is so annoying we are told to authenticate but not be able to. And I say this as a person that had to remove hardware security keys from my account while on an apple support call for homekit issues. They kept telling me to go to my icloud settings and click the generate verification code but the generation of a verification code is unavailable when you use security keys - which is ridiculous if they provide no way to login to certain things or anything. The support agent kept telling me well you should be able to generate the verification codes regardless, but the reality is that isn't the case, its missing from settings. Really dumb decision they made with their integration of hardware security keys. Who the heck advised that? Was a wonderful idea on their part... 🙄

Really just wondering if there is another way around this but for now I gave up on it as icloud isn't 100% needed but it would be nice either way...also removal of security keys I feel would be a short-term solution to having to do it again in the future for potential re-authentications... and so that turns me away even more from doing so..

@jchrismills
Copy link

jchrismills commented Jun 1, 2024

I have 3 keys on my account and was prompted to allow and with security codes on trusted devices. No issues. Running iOS 17.5.1, dev beta

@lucaconlaq
Copy link

Hello. I'm facing the same issue. Has anyone discovered a solution? I'm using version 17.5.1.

@CosticaPuntaru
Copy link

the way i am fixing this is remove the integration and add it back, the entities are fine after re creating integration

@InjectMeneer
Copy link

I've just talked to the Apple Service desk. They're confirming that the 2FA isn't in any way linked to the app specific passwords. Therefore the integration asking for 2FA is really irrelevant.

Do note: When using my iCloud credentials, i'm still getting the 2FA pop-up's on all of my Apple devices. So there's no issue there. It just gets really annoying when the pop-up's keep popping up, and the emails are pouring in.

@aries223
Copy link

Same problem here...

Copy link

There hasn't been any activity on this issue recently. Due to the high number of incoming GitHub notifications, we have to clean some of the old issues, as many of them have already been resolved.
If this issue is still relevant, please let us know by leaving a comment 👍
This issue has now has been marked as stale and will be closed if no further activity occurs. Thank you for your contributions.

@github-actions github-actions bot added the Stale The PR had no activity for quite some time, and is marked as Stale label Nov 11, 2024
@InjectMeneer
Copy link

It should still be relevant. I’ll check somewhere this week. I’ve currently disabled it.

@github-actions github-actions bot removed the Stale The PR had no activity for quite some time, and is marked as Stale label Nov 11, 2024
@qvidal01
Copy link

I still cannot login with app-specific password

@timc3
Copy link

timc3 commented Dec 4, 2024

Still relevant. In fact the only way to use this at the moment is with my normal password and using the verification.

@tocaba
Copy link

tocaba commented Dec 13, 2024

Same problem here, cannot login with app-specific password

@bliekp
Copy link

bliekp commented Jan 23, 2025

Also here it does not work. Created an app-specific password at Apple, installed the plugin into HA and filled emailadres and the app-specific password. It tells me my credentials are incorrect...

@MrBlue90
Copy link

MrBlue90 commented Feb 2, 2025

Same problem here.
I see that this issue has been reported more than a year ago.
@Quentame Could you please share with us if you’ve noticed this issue, and if the integration is still being maintained by you?
Thanks!

@lintal
Copy link

lintal commented Feb 18, 2025

I found the workaround described here worked for me:
home-assistant/core#86499 (comment)

It's a bit of a faf, as you first need to remove your security keys to fall-back to Apple's OTP, go through the motions described below, then re-add your security keys. I'm hoping that's it now. 🤞

  1. Setup the icloud integration normally, with your regular icloud account email and password. Do the whole dance with the auth code it sends to your iphone/ipad. The integration will install properly and you'll see all of your devices.

  2. Go into that integration... you'll see the "Integration Entities" screen. You'll see the account you just set up. Click the three dots menu and click Delete. STAY ON THIS SCREEN.

  3. Click Add Entry and do the same thing, but this time use your icloud email and use the app-specific password. It won't ask you for an auth code and will install properly.

  4. Profit!

@ovflowd
Copy link

ovflowd commented Mar 22, 2025

cc @nzapponi @Quentame

@lucymhdavies
Copy link

Can confirm, @lintal 's workaround works for me also.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests