If you’re concerned that an unauthorised person may have access to your Apple Account, these steps can help you regain control of your account.
Apple notifies you (notification or email) about account activity you don’t recognise (for example, if your Apple Account was signed in to on a device you don’t recognise or your password was changed but you didn’t change it).
You receive a two-factor authentication code (either on a trusted device or via text message) that you didn’t request.
You notice unusual activity, such as messages you didn’t send, deleted items you didn’t delete, account details you didn’t change or don’t recognise, trusted devices you didn’t add or don’t recognise, or purchase activity you don’t recognise.
Your password no longer works.
Your device was locked or placed in Lost Mode by someone other than you.
Find out how to recognise and avoid social engineering schemes, including phishing scams
Find out what to do if you see an unfamiliar iTunes Store or App Store charge
Change your Apple Account password. Make sure you use a strong and unique password.
If you can’t change your Apple Account password because it’s already been changed by someone else, reset your password.
Go to account.apple.com to update any of the personal or security information that isn’t correct or you don’t recognise.
On account.apple.com, select Devices and remove any devices associated with your Apple Account you don’t recognise.
Check with your email provider and mobile network provider to make sure you control every email address and phone number associated with your Apple Account. For example, check with your mobile network provider that SMS forwarding hasn’t been set up for a phone number associated with your Apple Account.
If you can’t reset your Apple Account password or sign in to account.apple.com, go to iforgot.apple.com to start account recovery and regain access after an account recovery waiting period.
Find out more about account recovery
After you’ve regained control of your Apple Account, follow these instructions to make sure you control all of the Apple Accounts signed in to your devices and that your Apple Account is secure.
To make sure you’re signed in to Apple Accounts that only you control or trust, check the settings on each of your devices.
Open the Settings app on your iPhone, iPad, iPod touch or Apple Watch, or System Settings (or System Preferences) on your Mac.
You should see your name. Tap your name and verify the email address associated with your Apple Account.
On each of your devices, check the settings for services that you’ve signed in to with your Apple Account (including FaceTime, Messages, Media & Purchases, Internet Accounts, Mail and Calendar).
Check iCloud for Windows, your HomePod (using the Home app on your iPhone or iPad) and your Apple TV (for iCloud Photos or Home Sharing).
If you haven’t already, set up two-factor authentication for your Apple Account. This additional security feature is designed to prevent someone else from accessing your account, even if they know your password.
For extra protection against targeted attacks such as phishing, use Security Keys for your Apple Account.
You should be the only person who knows your password and can sign in to your Apple Account.
If someone you don’t know or don’t trust can sign in to your Apple Account, your account is not secure.
Protect your device with a passcode and, for additional protection against the rare instance when someone else has your iPhone and knows your passcode, turn on Stolen Device Protection for iPhone.
Find out how to secure your device if it’s lost