Security and your Apple Account
Learn more about security and your Apple Account.
You use your Apple Account to sign in to Apple Services — like the App store, iCloud, Apple Music, iMessage, FaceTime, and more — and your account information includes your contact, payment, and security details. Apple uses best-in-class security technologies to help secure your data.
Never give your Apple Account password, verification codes, device passcode, recovery key, or any account security details to anyone else. Apple will never ask you for this information.
Apple has strict policies and procedures in place to prevent unauthorized access to your Apple Account. When you contact us for support, we may ask you to confirm your Apple Account via a notification that we send to your device. Or you can generate a temporary Support PIN that identifies your Apple Account.
Protect your Apple Account and password
To help protect your Apple Account and all the important content that you store with Apple, you can follow these recommendations.
Protect your account with two-factor authentication
Two-factor authentication is designed to make sure that you're the only person who can access your Apple Account, even if someone else knows your password. When you sign in to your Apple Account for the first time on a new device, that device asks for the verification code that is displayed automatically on your trusted devices.
Turn on Stolen Device Protection for iPhone
Stolen Device Protection is a security feature that helps prevent someone who has stolen your iPhone and knows your passcode from making critical changes to your account or device.
When Stolen Device Protection is turned on, some features and actions have additional security requirements when your iPhone is away from familiar locations such as home or work.
Keep your Apple Account password private
Apple requires that you use a strong password for your Apple Account — eight or more characters, including upper and lowercase letters and at least one number.
Never share your Apple Account password, verification codes, or account security details with anyone. Don't use your Apple Account password with other online accounts.
Don't share an Apple Account
Don't share an account with other people, even family members. Sharing an Apple Account means that you're giving someone else access to all of your personal content. If someone else helped you set up your Apple Account and password, change your password.
To share App Store purchases, photos, a calendar, and more, use Family Sharing, iCloud Photo Sharing, and other easy-to-use sharing features.
Keep your account information up to date
Apple notifies you by email, text, or notification when changes are made to your account, such as when you sign in for the first time on a new device or change your password. If you receive a notification, but don't remember making changes, someone else might have wrongfully accessed your account. You should change your password immediately and always keep your account information up to date.
Additional tips to protect your device and data
Use a device passcode or password and Face ID or Touch ID. For better security, you can set a passcode on your device — or login password on your Mac — to help protect your data. Use Face ID or Touch ID if your device supports it.
Keep your software up to date. Apple software releases include bug fixes, new features, and critical security updates. Make sure you update your device whenever software updates are available.
Consider using a physical security key to provide extra protection for your Apple Account. Security keys help protect against targeted attacks, such as phishing or social engineering scams.
Protect your personal information. Learn how Apple designs products to protect your privacy and give you control over your information.
Don't fall for social engineering schemes. If it sounds like a scam, assume that it is. Follow online safety tips to avoid social engineering schemes like phishing and other online scams.
Learn more
Learn what to do if you think your Apple Account information has been compromised
