It can be set by logging into appleid.apple.com, and going into security. After setting it up, two of three things are needed to buy apps etc: Apple ID Password Trusted device Recovery key generated in the setup process This gets rid of the security questions. While even my mother wouldn't be able to figure out the answers, I went ahead and enabled this. Pretty simple to do, and in a normal use situation, it wouldn't change the normal process, since the device is registered as trusted. Highly recommended.