Apple Account hacked or password changed by someone else

Published by the platform

Apple says account recovery can take several days or longer, for security reasons. Apple Support cannot shorten the wait. You should get a confirmation email within 72 hours that gives a date and time when you can expect to get back in. If you can reset your password yourself, there is no wait.

While you wait

• Do not send a second recovery request. Apple says it generally won't help and may make the wait longer.
• Do not contact Apple Support to speed it up. Apple says it cannot.
• Check your status at iforgot.apple.com with the same email and phone number you used to start.
• Secure your email account first, since Apple sends recovery details there.

• Change your password and sign out other devices3 minOn iPhone, open Settings, tap your name, tap Sign-In & Security, then tap Change Password. When asked, choose Remove Other Devices so every other device must sign in again.source
• Check two-factor authentication and your trusted phone numbers3 minOpen Settings, tap your name, tap Sign-In & Security, then tap Two-Factor Authentication. Remove any number you do not know at account.apple.com under Sign-In and Security > Account Security. Tap Add Trusted Phone Number to add a second number you control, such as a family member's.source
• Add a recovery contact2 minOpen Settings, tap your name, tap Sign-In & Security, then tap Recovery Contacts and Add Recovery Contact. If you ever get locked out, this person can get a six-digit code for you. They cannot see or use your account.source
• Optional: a recovery key, only if you can keep it safe3 minA recovery key is a 28-character code under Sign-In & Security > Recovery Key. Setting one up turns off Apple's standard account recovery. If you lose the key and your devices, you can be locked out for good. Write it on paper and do not store it in Notes, Photos or iCloud Drive.source
• Turn on Stolen Device Protection1 minOpen Settings, tap Face ID & Passcode (or Touch ID & Passcode), enter your passcode, then turn on Stolen Device Protection. Away from familiar places, big account changes then need Face ID or Touch ID and a one-hour security delay.source
• Remove devices you do not recognize2 minOpen Settings and tap your name, then scroll to the device list. Tap any device you do not know and tap Remove from Account. On the web, sign in at account.apple.com and select Devices.source
• Review apps that use Sign in with Apple2 minOpen Settings, tap your name, then tap Sign in with Apple. Select any app you no longer use and tap Delete.source
• Consider security keys and passkeys3 minFor the strongest protection against phishing, add two physical security keys under Sign-In & Security > Two-Factor Authentication > Security Keys. Passkeys you save for other sites sync through iCloud Keychain, which needs two-factor authentication, so keep that turned on.source
• Run Safety Check3 minOpen Settings > Privacy & Security > Safety Check, then tap Manage Sharing & Access. It walks you through connected devices, trusted phone numbers, your password and who you share with.source