iCloud Config Triggers 2FA but doesn't connect

What is the problem you are having with rclone?

Unable to connect to Apple iCloud, authentication generates an error.

Run the command 'rclone version' and share the full output of the command.

rclone v1.74.2

  • os/version: ubuntu 24.04 (64 bit)
  • os/kernel: 6.17.0-35-generic (x86_64)
  • os/type: linux
  • os/arch: amd64
  • go/version: go1.26.3
  • go/linking: static
  • go/tags: none

Which cloud storage system are you using? (eg Google Drive)

iCloud Drive

The command you were trying to run (eg rclone copy /tmp remote:tmp)

\\\rclone config
Current remotes:

Name                 Type
====                 ====
internxt             webdav
onedrive             onedrive
proton               protondrive

e) Edit existing remote
n) New remote
d) Delete remote
r) Rename remote
c) Copy remote
s) Set configuration password
q) Quit config
e/n/d/r/c/s/q> n

Enter name for new remote.
name> icloud

Option Storage.
Type of storage to configure.
Choose a number from below, or type in your own value.

<snip>

65 / Zoho
   \ (zoho)
66 / iCloud Drive and Photos
   \ (iclouddrive)
67 / premiumize.me
   \ (premiumizeme)
68 / seafile
   \ (seafile)
Storage> 66

Option service.
iCloud service to use.
Choose a number from below, or type in your own value of type string.
Press Enter for the default (drive).
 1 / iCloud Drive
   \ (drive)
 2 / iCloud Photos
   \ (photos)
service> 1

Option apple_id.
Apple ID.
Enter a value.
apple_id> REDACTED

Option password.
Password.
Choose an alternative below.
y) Yes, type in my own password
g) Generate random password
y/g> y
Enter the password:
password:
Confirm the password:
password:

Edit advanced config?
y) Yes
n) No (default)
y/n> n

Option config_2fa.
Two-factor authentication: enter your 2FA code or type 'sms' for a text message
Enter a value.
config_2fa> 989479

Error: validate2FACode failed: HTTP error 409 (409 ) returned body: "{\n  \"trustedDeviceCount\" : 5,\n  \"securityCode\" : {\n    \"code\" : \"989479\",\n    \"tooManyCodesSent\" : false,\n    \"tooManyCodesValidated\" : false,\n    \"securityCodeLocked\" : false,\n    \"securityCodeCooldown\" : false,\n    \"valid\" : true\n  },\n  \"phoneNumberVerification\" : {\n    \"trustedPhoneNumbers\" : [ {\n      \"numberWithDialCode\" : \"+1 (•••) •••-••XX\",\n      \"nonFTEU\" : false,\n      \"obfuscatedNumber\" : \"(•••) •••-••XX\",\n      \"lastTwoDigits\" : \"XX\",\n      \"pushMode\" : \"sms\",\n      \"id\" : 1\n    } ],\n    \"securityCode\" : {\n      \"length\" : 6,\n      \"tooManyCodesSent\" : false,\n      \"tooManyCodesValidated\" : false,\n      \"securityCodeLocked\" : false,\n      \"securityCodeCooldown\" : false\n    },\n    \"authenticationType\" : \"hsa2\",\n    \"recoveryUrl\" : \"https://iforgot.apple.com/phone/add?prs_account_nm=REDACTED&autoSubmitAccount=true&appId=142\",\n    \"cantUsePhoneNumberUrl\" : \"https://iforgot.apple.com/iforgot/phone/add?context=cantuse&prs_account_nm=REDACTED&autoSubmitAccount=true&appId=142\",\n    \"recoveryWebUrl\" : \"https://iforgot.apple.com/password/verify/appleid?prs_account_nm=REDACTED&autoSubmitAccount=true&appId=142\",\n    \"repairPhoneNumberUrl\" : \"https://gsa.apple.com/appleid/account/manage/repair/verify/phone\",\n    \"repairPhoneNumberWebUrl\" : \"https://appleid.apple.com/widget/account/repair?#!repair\",\n    \"aboutTwoFactorAuthenticationUrl\" : \"https://support.apple.com/kb/HT204921\",\n    \"twoFactorVerificationSupportUrl\" : \"https://support.apple.com/HT208072\",\n    \"hasRecoveryKey\" : true,\n    \"supportsRecoveryKey\" : false,\n    \"autoVerified\" : false,\n    \"showAutoVerificationUI\" : false,\n    \"supportsCustodianRecovery\" : false,\n    \"hideSendSMSCodeOption\" : false,\n    \"supervisedChangePasswordFlow\" : false,\n    \"enableNonFTEU\" : true,\n    \"content\" : {\n      \"enterCodeDescription\" : \"Enter the verification code sent to your Apple devices.\",\n      \"sendCodeDescription\" : \"Apple can send another verification code to your other Apple devices.\",\n      \"resendCodeLink\" : \"Resend code to devices\",\n      \"canNotGetCodeLink\" : \"Can’t get to your devices?\",\n      \"canNotGetCodeTitle\" : \"Can’t get to your devices?\"\n    },\n    \"managedAccount\" : false,\n    \"restrictedAccount\" : false,\n    \"supportsRecovery\" : true,\n    \"trustedPhoneNumber\" : {\n      \"numberWithDialCode\" : \"+1 (•••) •••-••XX\",\n      \"nonFTEU\" : false,\n      \"obfuscatedNumber\" : \"(•••) •••-••XX\",\n      \"lastTwoDigits\" : \"XX\",\n      \"pushMode\" : \"sms\",\n      \"id\" : 1\n    },\n    \"hsa2Account\" : true\n  },\n  \"aboutTwoFactorAuthenticationUrl\" : \"https://support.apple.com/kb/HT204921\",\n  \"content\" : {\n    \"enterCodeDescription\" : \"Enter the verification code sent to your Apple devices.\",\n    \"sendCodeDescription\" : \"Apple can send another verification code to your other Apple devices.\",\n    \"resendCodeLink\" : \"Resend code to devices\",\n    \"canNotGetCodeLink\" : \"Can’t get to your devices?\",\n    \"canNotGetCodeTitle\" : \"Can’t get to your devices?\"\n  }\n}"
Usage:
  rclone config [flags]
  rclone config [command]

Available commands:
  create      Create a new remote with name, type and options.
  delete      Delete an existing remote.
  disconnect  Disconnects user from remote
  dump        Dump the config file as JSON.
  edit        Enter an interactive configuration session.
  encryption  set, remove and check the encryption for the config file
  file        Show path of configuration file in use.
  password    Update password in an existing remote.
  paths       Show paths used for configuration, cache, temp etc.
  providers   List in JSON format all the providers and options.
  reconnect   Re-authenticates user with remote.
  redacted    Print redacted (decrypted) config file, or the redacted config for a single remote.
  show        Print (decrypted) config file, or the config for a single remote.
  string      Print connection string for a single remote.
  touch       Ensure configuration file exists.
  update      Update options in an existing remote.
  userinfo    Prints info about logged in user of remote.

Flags:
  -h, --help   help for config

Use "rclone [command] --help" for more information about a command.
Use "rclone help flags" for to see the global flags.
Use "rclone help backends" for a list of supported services.

2026/05/30 19:25:31 NOTICE: Fatal error: validate2FACode failed: HTTP error 409 (409 ) returned body: "{\n  \"trustedDeviceCount\" : 5,\n  \"securityCode\" : {\n    \"code\" : \"989479\",\n    \"tooManyCodesSent\" : false,\n    \"tooManyCodesValidated\" : false,\n    \"securityCodeLocked\" : false,\n    \"securityCodeCooldown\" : false,\n    \"valid\" : true\n  },\n  \"phoneNumberVerification\" : {\n    \"trustedPhoneNumbers\" : [ {\n      \"numberWithDialCode\" : \"+1 (•••) •••-••XX\",\n      \"nonFTEU\" : false,\n      \"obfuscatedNumber\" : \"(•••) •••-••XX\",\n      \"lastTwoDigits\" : \"XX\",\n      \"pushMode\" : \"sms\",\n      \"id\" : 1\n    } ],\n    \"securityCode\" : {\n      \"length\" : 6,\n      \"tooManyCodesSent\" : false,\n      \"tooManyCodesValidated\" : false,\n      \"securityCodeLocked\" : false,\n      \"securityCodeCooldown\" : false\n    },\n    \"authenticationType\" : \"hsa2\",\n    \"recoveryUrl\" : \"https://iforgot.apple.com/phone/add?prs_account_nm=REDACTED&autoSubmitAccount=true&appId=142\",\n    \"cantUsePhoneNumberUrl\" : \"https://iforgot.apple.com/iforgot/phone/add?context=cantuse&prs_account_nm=REDACTED&autoSubmitAccount=true&appId=142\",\n    \"recoveryWebUrl\" : \"https://iforgot.apple.com/password/verify/appleid?prs_account_nm=REDACTED&autoSubmitAccount=true&appId=142\",\n    \"repairPhoneNumberUrl\" : \"https://gsa.apple.com/appleid/account/manage/repair/verify/phone\",\n    \"repairPhoneNumberWebUrl\" : \"https://appleid.apple.com/widget/account/repair?#!repair\",\n    \"aboutTwoFactorAuthenticationUrl\" : \"https://support.apple.com/kb/HT204921\",\n    \"twoFactorVerificationSupportUrl\" : \"https://support.apple.com/HT208072\",\n    \"hasRecoveryKey\" : true,\n    \"supportsRecoveryKey\" : false,\n    \"autoVerified\" : false,\n    \"showAutoVerificationUI\" : false,\n    \"supportsCustodianRecovery\" : false,\n    \"hideSendSMSCodeOption\" : false,\n    \"supervisedChangePasswordFlow\" : false,\n    \"enableNonFTEU\" : true,\n    \"content\" : {\n      \"enterCodeDescription\" : \"Enter the verification code sent to your Apple devices.\",\n      \"sendCodeDescription\" : \"Apple can send another verification code to your other Apple devices.\",\n      \"resendCodeLink\" : \"Resend code to devices\",\n      \"canNotGetCodeLink\" : \"Can’t get to your devices?\",\n      \"canNotGetCodeTitle\" : \"Can’t get to your devices?\"\n    },\n    \"managedAccount\" : false,\n    \"restrictedAccount\" : false,\n    \"supportsRecovery\" : true,\n    \"trustedPhoneNumber\" : {\n      \"numberWithDialCode\" : \"+1 (•••) •••-••XX\",\n      \"nonFTEU\" : false,\n      \"obfuscatedNumber\" : \"(•••) •••-••XX\",\n      \"lastTwoDigits\" : \"XX\",\n      \"pushMode\" : \"sms\",\n      \"id\" : 1\n    },\n    \"hsa2Account\" : true\n  },\n  \"aboutTwoFactorAuthenticationUrl\" : \"https://support.apple.com/kb/HT204921\",\n  \"content\" : {\n    \"enterCodeDescription\" : \"Enter the verification code sent to your Apple devices.\",\n    \"sendCodeDescription\" : \"Apple can send another verification code to your other Apple devices.\",\n    \"resendCodeLink\" : \"Resend code to devices\",\n    \"canNotGetCodeLink\" : \"Can’t get to your devices?\",\n    \"canNotGetCodeTitle\" : \"Can’t get to your devices?\"\n  }\n}"

Please run 'rclone config redacted' and share the full output. If you get command not found, please make sure to update rclone.

\\\rclone config redacted
[icloud]
type = iclouddrive
apple_id = XXX
password = XXX
_auth_session = XXX
cookies = XXX

[internxt]
type = webdav
url = https://webdav.local.internxt.com:NNNN
vendor = other
override.no_check_certificate = true

[onedrive]
type = onedrive
token = XXX
drive_id = XXX
drive_type = personal

[proton]
type = protondrive
username = REDACTED
password = XXX
2fa = NNNNNN
client_uid = XXX
client_access_token = XXX
client_refresh_token = XXX
client_salted_key_pass = XXX
### Double check the config for sensitive info before posting publicly

A log from the command that you were trying to run with the -vv flag

\\\2026/05/30 19:38:06 DEBUG : rclone: Version "v1.74.2" starting with parameters ["rclone" "-vv" "--log-file" "/home/prscarr/log/rclone-config.log" "config"]
2026/05/30 19:38:06 DEBUG : Using config file from "/home/prscarr/.config/rclone/rclone.conf"
2026/05/30 19:38:16 DEBUG : icloud: config in: state="*all", result=""
2026/05/30 19:38:16 DEBUG : icloud: config out: out=&{State:*all-set,0,false Option:drive OAuth:<nil> Error: Result:}, err=<nil>
2026/05/30 19:38:16 DEBUG : icloud: config: reading config parameter "service"
2026/05/30 19:38:20 DEBUG : icloud: config in: state="*all-set,0,false", result="drive"
2026/05/30 19:38:20 DEBUG : icloud: config out: out=&{State:*all,1,false Option:<nil> OAuth:<nil> Error: Result:}, err=<nil>
2026/05/30 19:38:20 DEBUG : icloud: config in: state="*all,1,false", result=""
2026/05/30 19:38:20 DEBUG : icloud: config out: out=&{State:*all-set,1,false Option: OAuth:<nil> Error: Result:}, err=<nil>
2026/05/30 19:38:20 DEBUG : icloud: config: reading config parameter "apple_id"
2026/05/30 19:38:29 DEBUG : icloud: config in: state="*all-set,1,false", result="REDACTED@icloud.com"
2026/05/30 19:38:29 DEBUG : Saving config "apple_id" in section "icloud" of the config file
2026/05/30 19:38:29 DEBUG : Keeping previous permissions for config file: -rw-rw----
2026/05/30 19:38:29 DEBUG : icloud: config out: out=&{State:*all,2,false Option:<nil> OAuth:<nil> Error: Result:}, err=<nil>
2026/05/30 19:38:29 DEBUG : icloud: config in: state="*all,2,false", result=""
2026/05/30 19:38:29 DEBUG : icloud: config out: out=&{State:*all-set,2,false Option: OAuth:<nil> Error: Result:}, err=<nil>
2026/05/30 19:38:29 DEBUG : icloud: config: reading config parameter "password"


2026/05/30 19:38:47 DEBUG : icloud: config in: state="*all-set,2,false", result="6tsrmfY7-ZymwfiGXPBRrbCC2yMCZ9sVVVFnWpMzxidHU-WzFfYyVRfOwzQALyY"
2026/05/30 19:38:47 DEBUG : Saving config "password" in section "icloud" of the config file
2026/05/30 19:38:47 DEBUG : Keeping previous permissions for config file: -rw-rw----
2026/05/30 19:38:47 DEBUG : icloud: config out: out=&{State:*all,3,false Option:<nil> OAuth:<nil> Error: Result:}, err=<nil>
2026/05/30 19:38:47 DEBUG : icloud: config in: state="*all,3,false", result=""
2026/05/30 19:38:47 DEBUG : icloud: config out: out=&{State:*all,4,false Option:<nil> OAuth:<nil> Error: Result:}, err=<nil>
2026/05/30 19:38:47 DEBUG : icloud: config in: state="*all,4,false", result=""
2026/05/30 19:38:47 DEBUG : icloud: config out: out=&{State:*all,5,false Option:<nil> OAuth:<nil> Error: Result:}, err=<nil>
2026/05/30 19:38:47 DEBUG : icloud: config in: state="*all,5,false", result=""
2026/05/30 19:38:47 DEBUG : icloud: config out: out=&{State:*all,6,false Option:<nil> OAuth:<nil> Error: Result:}, err=<nil>
2026/05/30 19:38:47 DEBUG : icloud: config in: state="*all,6,false", result=""
2026/05/30 19:38:47 DEBUG : icloud: config out: out=&{State:*all,7,false Option:<nil> OAuth:<nil> Error: Result:}, err=<nil>
2026/05/30 19:38:47 DEBUG : icloud: config in: state="*all,7,false", result=""
2026/05/30 19:38:47 DEBUG : icloud: config out: out=&{State:*all,8,false Option:<nil> OAuth:<nil> Error: Result:}, err=<nil>
2026/05/30 19:38:47 DEBUG : icloud: config in: state="*all,8,false", result=""
2026/05/30 19:38:47 DEBUG : icloud: config out: out=&{State:*all-advanced Option:false OAuth:<nil> Error: Result:}, err=<nil>
2026/05/30 19:38:47 DEBUG : icloud: config: reading config parameter "config_fs_advanced"
2026/05/30 19:38:49 DEBUG : icloud: config in: state="*all-advanced", result="false"
2026/05/30 19:38:49 DEBUG : icloud: config out: out=&{State:*postconfig Option:<nil> OAuth:<nil> Error: Result:}, err=<nil>
2026/05/30 19:38:49 DEBUG : icloud: config in: state="*postconfig", result=""
2026/05/30 19:38:49 DEBUG : icloud: config in: state="", result=""
2026/05/30 19:38:49 DEBUG : Saving config "_auth_session" in section "icloud" of the config file
2026/05/30 19:38:49 DEBUG : Keeping previous permissions for config file: -rw-rw----
2026/05/30 19:38:49 DEBUG : iclouddrive: authenticating
2026/05/30 19:38:51 DEBUG : iclouddrive: SRP sign in requires 2FA, response: {
  "authType" : "hsa2"
}
2026/05/30 19:38:51 DEBUG : Saving config "cookies" in section "icloud" of the config file
2026/05/30 19:38:51 DEBUG : Keeping previous permissions for config file: -rw-rw----
2026/05/30 19:38:51 DEBUG : iclouddrive: auth state response summary: bytes=2526 hash=de34434df123 keys=[apnsEnvironment apnsTopic phoneNumberVerification webSocketUrl] wrapped=true
2026/05/30 19:38:51 DEBUG : iclouddrive: unwrapping phoneNumberVerification envelope
2026/05/30 19:38:51 DEBUG : iclouddrive: auth state: type=hsa2 hsa2=true noTrustedDevices=false phones=1 phoneSingular=true
2026/05/30 19:38:52 DEBUG : iclouddrive: push notification requested to trusted devices
2026/05/30 19:38:52 DEBUG : Saving config "_auth_session" in section "icloud" of the config file
2026/05/30 19:38:52 DEBUG : Keeping previous permissions for config file: -rw-rw----
2026/05/30 19:38:52 DEBUG : icloud: config out: out=&{State:2fa_do Option: OAuth:<nil> Error: Result:}, err=<nil>
2026/05/30 19:38:52 DEBUG : icloud: config out: out=&{State:2fa_do Option: OAuth:<nil> Error: Result:}, err=<nil>
2026/05/30 19:38:52 DEBUG : icloud: config: reading config parameter "config_2fa"
2026/05/30 19:39:02 DEBUG : icloud: config in: state="2fa_do", result="054241"
2026/05/30 19:39:03 DEBUG : icloud: config out: out=<nil>, err=validate2FACode failed: HTTP error 409 (409 ) returned body: "{\n  \"trustedDeviceCount\" : 5,\n  \"securityCode\" : {\n    \"code\" : \"054241\",\n    \"tooManyCodesSent\" : false,\n    \"tooManyCodesValidated\" : false,\n    \"securityCodeLocked\" : false,\n    \"securityCodeCooldown\" : false,\n    \"valid\" : true\n  },\n  \"phoneNumberVerification\" : {\n    \"trustedPhoneNumbers\" : [ {\n      \"numberWithDialCode\" : \"+1 (•••) •••-••NN\",\n      \"nonFTEU\" : false,\n      \"obfuscatedNumber\" : \"(•••) •••-••NN\",\n      \"lastTwoDigits\" : \"NN\",\n      \"pushMode\" : \"sms\",\n      \"id\" : 1\n    } ],\n    \"securityCode\" : {\n      \"length\" : 6,\n      \"tooManyCodesSent\" : false,\n      \"tooManyCodesValidated\" : false,\n      \"securityCodeLocked\" : false,\n      \"securityCodeCooldown\" : false\n    },\n    \"authenticationType\" : \"hsa2\",\n    \"recoveryUrl\" : \"https://iforgot.apple.com/phone/add?prs_account_nm=REDACTED%40icloud.com&autoSubmitAccount=true&appId=142\",\n    \"cantUsePhoneNumberUrl\" : \"https://iforgot.apple.com/iforgot/phone/add?context=cantuse&prs_account_nm=REDACTED%40icloud.com&autoSubmitAccount=true&appId=142\",\n    \"recoveryWebUrl\" : \"https://iforgot.apple.com/password/verify/appleid?prs_account_nm=REDACTED%40icloud.com&autoSubmitAccount=true&appId=142\",\n    \"repairPhoneNumberUrl\" : \"https://gsa.apple.com/appleid/account/manage/repair/verify/phone\",\n    \"repairPhoneNumberWebUrl\" : \"https://appleid.apple.com/widget/account/repair?#!repair\",\n    \"aboutTwoFactorAuthenticationUrl\" : \"https://support.apple.com/kb/HT204921\",\n    \"twoFactorVerificationSupportUrl\" : \"https://support.apple.com/HT208072\",\n    \"hasRecoveryKey\" : true,\n    \"supportsRecoveryKey\" : false,\n    \"autoVerified\" : false,\n    \"showAutoVerificationUI\" : false,\n    \"supportsCustodianRecovery\" : false,\n    \"hideSendSMSCodeOption\" : false,\n    \"supervisedChangePasswordFlow\" : false,\n    \"enableNonFTEU\" : true,\n    \"content\" : {\n      \"enterCodeDescription\" : \"Enter the verification code sent to your Apple devices.\",\n      \"sendCodeDescription\" : \"Apple can send another verification code to your other Apple devices.\",\n      \"resendCodeLink\" : \"Resend code to devices\",\n      \"canNotGetCodeLink\" : \"Can’t get to your devices?\",\n      \"canNotGetCodeTitle\" : \"Can’t get to your devices?\"\n    },\n    \"managedAccount\" : false,\n    \"restrictedAccount\" : false,\n    \"supportsRecovery\" : true,\n    \"trustedPhoneNumber\" : {\n      \"numberWithDialCode\" : \"+1 (•••) •••-••NN\",\n      \"nonFTEU\" : false,\n      \"obfuscatedNumber\" : \"(•••) •••-••NN\",\n      \"lastTwoDigits\" : \"NN\",\n      \"pushMode\" : \"sms\",\n      \"id\" : 1\n    },\n    \"hsa2Account\" : true\n  },\n  \"aboutTwoFactorAuthenticationUrl\" : \"https://support.apple.com/kb/HT204921\",\n  \"content\" : {\n    \"enterCodeDescription\" : \"Enter the verification code sent to your Apple devices.\",\n    \"sendCodeDescription\" : \"Apple can send another verification code to your other Apple devices.\",\n    \"resendCodeLink\" : \"Resend code to devices\",\n    \"canNotGetCodeLink\" : \"Can’t get to your devices?\",\n    \"canNotGetCodeTitle\" : \"Can’t get to your devices?\"\n  }\n}"
Error: validate2FACode failed: HTTP error 409 (409 ) returned body: "{\n  \"trustedDeviceCount\" : 5,\n  \"securityCode\" : {\n    \"code\" : \"054241\",\n    \"tooManyCodesSent\" : false,\n    \"tooManyCodesValidated\" : false,\n    \"securityCodeLocked\" : false,\n    \"securityCodeCooldown\" : false,\n    \"valid\" : true\n  },\n  \"phoneNumberVerification\" : {\n    \"trustedPhoneNumbers\" : [ {\n      \"numberWithDialCode\" : \"+1 (•••) •••-••NN\",\n      \"nonFTEU\" : false,\n      \"obfuscatedNumber\" : \"(•••) •••-••NN\",\n      \"lastTwoDigits\" : \"NN\",\n      \"pushMode\" : \"sms\",\n      \"id\" : 1\n    } ],\n    \"securityCode\" : {\n      \"length\" : 6,\n      \"tooManyCodesSent\" : false,\n      \"tooManyCodesValidated\" : false,\n      \"securityCodeLocked\" : false,\n      \"securityCodeCooldown\" : false\n    },\n    \"authenticationType\" : \"hsa2\",\n    \"recoveryUrl\" : \"https://iforgot.apple.com/phone/add?prs_account_nm=REDACTED%40icloud.com&autoSubmitAccount=true&appId=142\",\n    \"cantUsePhoneNumberUrl\" : \"https://iforgot.apple.com/iforgot/phone/add?context=cantuse&prs_account_nm=REDACTED%40icloud.com&autoSubmitAccount=true&appId=142\",\n    \"recoveryWebUrl\" : \"https://iforgot.apple.com/password/verify/appleid?prs_account_nm=REDACTED%40icloud.com&autoSubmitAccount=true&appId=142\",\n    \"repairPhoneNumberUrl\" : \"https://gsa.apple.com/appleid/account/manage/repair/verify/phone\",\n    \"repairPhoneNumberWebUrl\" : \"https://appleid.apple.com/widget/account/repair?#!repair\",\n    \"aboutTwoFactorAuthenticationUrl\" : \"https://support.apple.com/kb/HT204921\",\n    \"twoFactorVerificationSupportUrl\" : \"https://support.apple.com/HT208072\",\n    \"hasRecoveryKey\" : true,\n    \"supportsRecoveryKey\" : false,\n    \"autoVerified\" : false,\n    \"showAutoVerificationUI\" : false,\n    \"supportsCustodianRecovery\" : false,\n    \"hideSendSMSCodeOption\" : false,\n    \"supervisedChangePasswordFlow\" : false,\n    \"enableNonFTEU\" : true,\n    \"content\" : {\n      \"enterCodeDescription\" : \"Enter the verification code sent to your Apple devices.\",\n      \"sendCodeDescription\" : \"Apple can send another verification code to your other Apple devices.\",\n      \"resendCodeLink\" : \"Resend code to devices\",\n      \"canNotGetCodeLink\" : \"Can’t get to your devices?\",\n      \"canNotGetCodeTitle\" : \"Can’t get to your devices?\"\n    },\n    \"managedAccount\" : false,\n    \"restrictedAccount\" : false,\n    \"supportsRecovery\" : true,\n    \"trustedPhoneNumber\" : {\n      \"numberWithDialCode\" : \"+1 (•••) •••-••NN\",\n      \"nonFTEU\" : false,\n      \"obfuscatedNumber\" : \"(•••) •••-••NN\",\n      \"lastTwoDigits\" : \"NN\",\n      \"pushMode\" : \"sms\",\n      \"id\" : 1\n    },\n    \"hsa2Account\" : true\n  },\n  \"aboutTwoFactorAuthenticationUrl\" : \"https://support.apple.com/kb/HT204921\",\n  \"content\" : {\n    \"enterCodeDescription\" : \"Enter the verification code sent to your Apple devices.\",\n    \"sendCodeDescription\" : \"Apple can send another verification code to your other Apple devices.\",\n    \"resendCodeLink\" : \"Resend code to devices\",\n    \"canNotGetCodeLink\" : \"Can’t get to your devices?\",\n    \"canNotGetCodeTitle\" : \"Can’t get to your devices?\"\n  }\n}"
Usage:
  rclone config [flags]
  rclone config [command]

Available commands:
  create      Create a new remote with name, type and options.
  delete      Delete an existing remote.
  disconnect  Disconnects user from remote
  dump        Dump the config file as JSON.
  edit        Enter an interactive configuration session.
  encryption  set, remove and check the encryption for the config file
  file        Show path of configuration file in use.
  password    Update password in an existing remote.
  paths       Show paths used for configuration, cache, temp etc.
  providers   List in JSON format all the providers and options.
  reconnect   Re-authenticates user with remote.
  redacted    Print redacted (decrypted) config file, or the redacted config for a single remote.
  show        Print (decrypted) config file, or the config for a single remote.
  string      Print connection string for a single remote.
  touch       Ensure configuration file exists.
  update      Update options in an existing remote.
  userinfo    Prints info about logged in user of remote.

Flags:
  -h, --help   help for config

Use "rclone [command] --help" for more information about a command.
Use "rclone help flags" for to see the global flags.
Use "rclone help backends" for a list of supported services.

2026/05/30 19:39:03 NOTICE: Fatal error: validate2FACode failed: HTTP error 409 (409 ) returned body: "{\n  \"trustedDeviceCount\" : 5,\n  \"securityCode\" : {\n    \"code\" : \"054241\",\n    \"tooManyCodesSent\" : false,\n    \"tooManyCodesValidated\" : false,\n    \"securityCodeLocked\" : false,\n    \"securityCodeCooldown\" : false,\n    \"valid\" : true\n  },\n  \"phoneNumberVerification\" : {\n    \"trustedPhoneNumbers\" : [ {\n      \"numberWithDialCode\" : \"+1 (•••) •••-••NN\",\n      \"nonFTEU\" : false,\n      \"obfuscatedNumber\" : \"(•••) •••-••NN\",\n      \"lastTwoDigits\" : \"NN\",\n      \"pushMode\" : \"sms\",\n      \"id\" : 1\n    } ],\n    \"securityCode\" : {\n      \"length\" : 6,\n      \"tooManyCodesSent\" : false,\n      \"tooManyCodesValidated\" : false,\n      \"securityCodeLocked\" : false,\n      \"securityCodeCooldown\" : false\n    },\n    \"authenticationType\" : \"hsa2\",\n    \"recoveryUrl\" : \"https://iforgot.apple.com/phone/add?prs_account_nm=REDACTED%40icloud.com&autoSubmitAccount=true&appId=142\",\n    \"cantUsePhoneNumberUrl\" : \"https://iforgot.apple.com/iforgot/phone/add?context=cantuse&prs_account_nm=REDACTED%40icloud.com&autoSubmitAccount=true&appId=142\",\n    \"recoveryWebUrl\" : \"https://iforgot.apple.com/password/verify/appleid?prs_account_nm=REDACTED%40icloud.com&autoSubmitAccount=true&appId=142\",\n    \"repairPhoneNumberUrl\" : \"https://gsa.apple.com/appleid/account/manage/repair/verify/phone\",\n    \"repairPhoneNumberWebUrl\" : \"https://appleid.apple.com/widget/account/repair?#!repair\",\n    \"aboutTwoFactorAuthenticationUrl\" : \"https://support.apple.com/kb/HT204921\",\n    \"twoFactorVerificationSupportUrl\" : \"https://support.apple.com/HT208072\",\n    \"hasRecoveryKey\" : true,\n    \"supportsRecoveryKey\" : false,\n    \"autoVerified\" : false,\n    \"showAutoVerificationUI\" : false,\n    \"supportsCustodianRecovery\" : false,\n    \"hideSendSMSCodeOption\" : false,\n    \"supervisedChangePasswordFlow\" : false,\n    \"enableNonFTEU\" : true,\n    \"content\" : {\n      \"enterCodeDescription\" : \"Enter the verification code sent to your Apple devices.\",\n      \"sendCodeDescription\" : \"Apple can send another verification code to your other Apple devices.\",\n      \"resendCodeLink\" : \"Resend code to devices\",\n      \"canNotGetCodeLink\" : \"Can’t get to your devices?\",\n      \"canNotGetCodeTitle\" : \"Can’t get to your devices?\"\n    },\n    \"managedAccount\" : false,\n    \"restrictedAccount\" : false,\n    \"supportsRecovery\" : true,\n    \"trustedPhoneNumber\" : {\n      \"numberWithDialCode\" : \"+1 (•••) •••-••NN\",\n      \"nonFTEU\" : false,\n      \"obfuscatedNumber\" : \"(•••) •••-••NN\",\n      \"lastTwoDigits\" : \"NN\",\n      \"pushMode\" : \"sms\",\n      \"id\" : 1\n    },\n    \"hsa2Account\" : true\n  },\n  \"aboutTwoFactorAuthenticationUrl\" : \"https://support.apple.com/kb/HT204921\",\n  \"content\" : {\n    \"enterCodeDescription\" : \"Enter the verification code sent to your Apple devices.\",\n    \"sendCodeDescription\" : \"Apple can send another verification code to your other Apple devices.\",\n    \"resendCodeLink\" : \"Resend code to devices\",\n    \"canNotGetCodeLink\" : \"Can’t get to your devices?\",\n    \"canNotGetCodeTitle\" : \"Can’t get to your devices?\"\n  }\n}"
prscarr@plex:~/tmp/rclone$ 

I'm getting exactly the same issue.

Ahah! I deleted everything in ~/.config/rclone/ and re-ran the config - it's working fine now :slight_smile:

Ugh, I have 5 other configs set, I don't what to nuke the whole thing...

hi, no need to delete the whole thing.

run rclone config and you can delete just the one remote.
or
rclone config delete name.of.your.remote: