iOS and Android App review with 2FA enabled
Overview
Getting your app approved on the App Store or Google Play Store can be challenging, especially when it involves Two-Factor Authentication (2FA) or Multi-Factor Authentication (MFA). Often, apps with 2FA/MFA face rejections due to the complexities of the approval process. GetMyMFA provides a solution by simplifying the process of securely sharing MFA codes with Apple and Google reviewers.
Key benefits of using GetMyMFA include:
- Streamlined App Approval: Ensure your app gets approved without the need for security bypasses or demo mode implementations.
- Easy MFA Code Access: Offer a web interface where MFA codes can be easily accessed by Apple or Google reviewers.
- Private and Secure Sharing: Shared phone numbers, email addresses, or TOTP keys remain yours and aren't shared with other customers.
How It Works
- Purchase a Number, Email, or TOTP Key: Choose a phone number from a selection of over 10 countries, mainly in the US and EU, or create a custom email address. You can also inject TOTP keys into the platform for MFA or 2FA purposes.
- Configure Your Settings: Customize your purchased phone number, email address, or TOTP key by enabling or disabling SMS code retrieval and forwarding as needed. This setup ensures that MFA codes are accessible only to the intended recipients.
- Share Access with Reviewers: After configuring your setup, grant access to the necessary users, such as Apple and Google reviewers. This step allows them to privately and securely access MFA codes through GetMyMFA's web interface.
- Guidance for Reviewers: When submitting your app for review, provide clear instructions on how reviewers can log in to GetMyMFA and retrieve the necessary MFA codes.
By integrating GetMyMFA into your app review workflow, you simplify the process of sharing MFA codes, reduce the risk of app rejection, and maintain high security standards, all while providing an easy experience for your app reviewers, which translates into faster approval processes.
Frequently Asked Questions
Why was my iOS app rejected for 2FA issues?
Apple rejects apps when reviewers cannot complete the sign-in flow during testing. If your app requires SMS or authenticator-based 2FA, reviewers need a way to receive those codes. Without access, they will flag the app under Guideline 2.1 (App Completeness). GetMyMFA solves this by giving you a virtual phone number that reviewers can use to receive MFA codes through a simple web interface.
How do I provide Apple reviewers with MFA access without disabling security?
Create a GetMyMFA virtual phone number and register it as the 2FA number for your test account. Then share access to the GetMyMFA web interface with Apple reviewers in your App Review notes. Reviewers can view incoming MFA codes in real-time without you disabling 2FA or creating security exceptions.
Does GetMyMFA work for Google Play Store app reviews too?
Yes, GetMyMFA works for both Apple App Store and Google Play Store reviews. The process is identical: create a virtual phone number, register it for 2FA on your test account, and share access with reviewers. Google Play reviewers can access MFA codes through the same web interface.
How long does it take to set up GetMyMFA for app submission?
Most teams are set up in under 10 minutes. Sign up, purchase a virtual phone number, register it as the 2FA number on your test account, and include the GetMyMFA login details in your app review notes. No code changes or backend modifications are required.