My Apple Account may be compromised

Do this first

Take back control

• Change your Apple Account password. Make sure that you use a strong and unique password.
• If you can't change your Apple Account password because it's already been changed by someone else, reset your password.
• Go to account.apple.com to update any of personal or security information that isn't correct or that you don't recognize.
• On account.apple.com, select Devices and remove any devices associated with your Apple Account that you don't recognize.
• Check with your email provider and cellular carrier to make sure that you control every email address and phone number associated with your Apple Account. For example, check with your cellular carrier that SMS forwarding hasn't been set up for a phone number associated with your Apple Account.

Apple: If you think your Apple Account has been compromised ↗

Then

1. 1 Signs Apple lists

   • Apple notifies you (notification or email) about account activity that you don't recognize (for example, if your Apple Account was signed in to on a device that you don't recognize or your password was changed but you didn't change it).
   • You receive a two-factor authentication code (either on a trusted device or via text message) that you didn't request.
   • You notice unusual activity, such as messages that you didn't send, deleted items that you didn’t delete, account details that you didn't change or don't recognize, trusted devices that you didn't add or don't recognize, or purchase activity that you don't recognize.
   • Your password no longer works.
   • Your device was locked or placed in Lost Mode by someone other than you.

   Apple: If you think your Apple Account has been compromised ↗

2. 2 Can't reset the password or sign in?

   • If you can't reset your Apple Account password or sign in to account.apple.com, go to iforgot.apple.com to start account recovery and regain access after an account recovery waiting period.

   Apple: If you think your Apple Account has been compromised ↗

3. 3 Check which account each device uses

   • Open the Settings app on your iPhone, iPad, iPod touch, or Apple Watch, or System Settings (or System Preferences) on your Mac.
   • You should see your name. Tap your name and verify the email address associated with your Apple Account.
   • On each of your devices, check the settings for services that you're signed in to with your Apple Account (including FaceTime, Messages, Media & Purchases, Internet Accounts, Mail, and Calendar).
   • Check iCloud for Windows, your HomePod (using the Home app on your iPhone or iPad), and your Apple TV 4K or Apple TV HD (for iCloud Photos or Home Sharing).

   Apple: If you think your Apple Account has been compromised ↗

4. 4 Lock it down

   • If you haven't already, set up two-factor authentication for your Apple Account. This additional security feature is designed to prevent someone else from accessing your account, even if they know your password.
   • For extra protection against targeted attacks such as phishing, use Security Keys for your Apple Account.
   • Protect your device with a passcode and, for additional protection against the rare instance when someone else has your iPhone and knows your passcode, turn on Stolen Device Protection for iPhone.

   Apple: If you think your Apple Account has been compromised ↗

Also on Osnivo

• Apple Account "disabled for security reasons"Error Explorer
• Apple Account "locked" or "not active"Error Explorer
• Security CheckupSettings worth checking and the latest security updates