With an app-specific password, you can use iCloud Mail through IMAP even with 2-step authentication enabled.


Security and Convenience for Your iCloud Mail Account

2-step authentication is the way to go to lock your iCloud Mail account for good—and that does include the good email programs on your computers and devices that you set up to access iCloud Mail through IMAP. The password you used in the past will be rejected and the email client without new mail.


That does not mean you have to do without IMAP access and your favorite email program, though: you can have iCloud Mail create a safe and random password for each program or service you use to access the account. The password will ideally only be stored in the program you created it for and can be easily revoked at any time when you stop using that program or service, or when you fear the password may have been stolen.


How to Enable 2-Step Authentication for iCloud Mail

To turn on 2-step authentication for a maximum of security for your iCloud Mail account:

  1. Visit My Apple ID.
  2. Click Manage your Apple ID.
  3. Type your iCloud Mail email address over Apple ID under Sign In..
  4. Enter your iCloud Mail password over Password.
  5. Click Sign In.
  6. Select Password and Security.

    If prompted, enter your answers to the security questions under Please answer your security questions, then click Continue.
  7. Follow the Get started… link under Two-Step Verification..
  8. Click Continue under Two-step verification for Apple ID.
  9. Click Continue again.
  10. Now click Get Started.
  11. Click Add a phone number… under Step 1 of 4: Set up your trusted devices..
  12. Make sure your country code is selected under Country:.
  13. Enter a phone number where you can receive SMS messages under Phone Number:.
  14. Click Next.
  15. Type the verification code received at the phone number under Verification Code:.
  16. Click Verify.
  17. Optionally, click Add another phone number…, repeatedly perhaps, to add additional phone numbers for trusted devices.
  18. Click Continue.
  19. Click Print Key and do print a copy of your Apple ID recovery key.
  20. Type the key from a printout under Enter your Recovery Key:.
  21. Click Confirm.
  22. Make sure I understand the conditions above. is checked.
  23. Click Enable two-step Verification.
  24. Now click Done.


How to Create an iCloud Mail Application Password for IMAP Access

To set up a password that allows an email program to access an iCloud Mail account (for which you have enabled 2-step authentication) through IMAP, for example to set up iCloud Mail on Android:

  1. Make sure 2-step authentication is enabled for your iCloud Mail account. See above.
  2. Open Manage Your Apple ID.
  3. Type your iCloud Mail email address over Apple ID under Manage your Apple Account.
  4. Enter your iCloud Mail password over Password.
  5. Click the sign-in arrow ().
  6. Select an iOS device or phone number to receive a verification code for logging in with 2-step authentication under Verify Your Identity.
  7. Type the verification code received under Enter Verification Code.
  8. Click Edit in the Security section
  9. Select Generate Password… under APP-SPECIFIC PASSWORDS.
  10. Enter the email program for use (SpinOffice CRM) in which you create the password under Label.

    Example: For a password to set up iCloud Mail in SpinOffice CRM on your Mac using IMAP, for instance, you could use "SpinOffice CRM (Mac)".
  11. Click Create.
  12. Enter the password immediately in the email program.

    Tip: It is usually best and easiest to use copying and pasting.

    Important: Case and punctuation matter for the app-specific password to work.
    Do not save the password anywhere but the email program; you can always go back to revoke it (see below) and create a new password.
  13. Click Done.


How to Revoke an App-Specific iCloud mail IMAP Password

To delete a password you created for an application in iCloud Mail:

  • Open My Apple ID.
  • Click Manage your Apple ID.
  • Type your iCloud Mail email address over Apple ID under Sign In..
  • Enter your iCloud Mail password over Password, also under Sign In..
  • Click Sign In.
  • Select an iOS device or phone number to receive a verification code for logging in with 2-step authentication under Send a verification code to:.
  • Click Send.
  • Type the verification code received under Verification Code:.
  • Click Continue.
  • Open the Password and Security category.
  • Click View History under Generate an app-specific password..
  • Now click Revoke next to the password you want to delete.
  • Click Revoke.
  • Now click Done.