Deepak Gupta

Lock down your Apple Account and iCloud account

9 settings, about 22 minutes. Do them in order: each one closes a door attackers use. Your ticks stay in this browser only.

0 of 9 doneAbout 22 minutes total

Change your password and sign out other devices3 minOn iPhone, open Settings, tap your name, tap Sign-In & Security, then tap Change Password. When asked, choose Remove Other Devices so every other device must sign in again.source
Check two-factor authentication and your trusted phone numbers3 minOpen Settings, tap your name, tap Sign-In & Security, then tap Two-Factor Authentication. Remove any number you do not know at account.apple.com under Sign-In and Security > Account Security. Tap Add Trusted Phone Number to add a second number you control, such as a family member's.source
Add a recovery contact2 minOpen Settings, tap your name, tap Sign-In & Security, then tap Recovery Contacts and Add Recovery Contact. If you ever get locked out, this person can get a six-digit code for you. They cannot see or use your account.source
Optional: a recovery key, only if you can keep it safe3 minA recovery key is a 28-character code under Sign-In & Security > Recovery Key. Setting one up turns off Apple's standard account recovery. If you lose the key and your devices, you can be locked out for good. Write it on paper and do not store it in Notes, Photos or iCloud Drive.source
Turn on Stolen Device Protection1 minOpen Settings, tap Face ID & Passcode (or Touch ID & Passcode), enter your passcode, then turn on Stolen Device Protection. Away from familiar places, big account changes then need Face ID or Touch ID and a one-hour security delay.source
Remove devices you do not recognize2 minOpen Settings and tap your name, then scroll to the device list. Tap any device you do not know and tap Remove from Account. On the web, sign in at account.apple.com and select Devices.source
Review apps that use Sign in with Apple2 minOpen Settings, tap your name, then tap Sign in with Apple. Select any app you no longer use and tap Delete.source
Consider security keys and passkeys3 minFor the strongest protection against phishing, add two physical security keys under Sign-In & Security > Two-Factor Authentication > Security Keys. Passkeys you save for other sites sync through iCloud Keychain, which needs two-factor authentication, so keep that turned on.source
Run Safety Check3 minOpen Settings > Privacy & Security > Safety Check, then tap Manage Sharing & Access. It walks you through connected devices, trusted phone numbers, your password and who you share with.source

Then

Write down where your recovery details live in the recovery kit, so a future lockout takes minutes, not weeks.

Free toolExposure CheckSee what of yours is already public.Free toolPassword Breach CheckCheck if a password shows up in known leaks.ReadHow to set up two-factor on all your accounts ReadPasskeys vs passwords

Comparing password managers or security keys? See the independent tool comparisons.

Sources and last check

Last verified: October 16, 2026. Steps checked against the platform's own help pages listed below. Device testing is ongoing; steps marked unconfirmed are still waiting for it.

Apple Support: Manage and use your Apple Account ("Apple ID is now Apple Account") (read 2026-10-16)
Apple Support: Change your Apple Account password (read 2026-10-16)
Apple Support: Two-factor authentication for Apple Account (read 2026-10-16)
Apple Support: About trusted phone numbers and trusted devices for Apple Account (read 2026-10-16)
Apple Support: Set up a recovery contact for your Apple Account (read 2026-10-16)
Apple Support: Set up a recovery key for your Apple Account (read 2026-10-16)
Apple Support: About Stolen Device Protection for iPhone (read 2026-10-16)
Apple Support: Review devices signed in to your Apple Account (read 2026-10-16)
Apple Support: Manage your apps with Sign in with Apple (read 2026-10-16)
Apple Support: About Security Keys for Apple Account (read 2026-10-16)
Apple Support: About the security of passkeys (read 2026-10-16)
Apple Personal Safety User Guide: Safety Check for an iPhone with iOS 16 or later (read 2026-10-16)
Apple Support: Recognize and avoid social engineering schemes (read 2026-10-16)
Apple Support: If you think your Apple Account has been compromised (read 2026-10-16)
Apple Support: What to expect during account recovery (read 2026-10-16)
Apple Support: If your Apple Account is locked, not active, or disabled (read 2026-10-16)
Apple Support: If you forgot your password and can't sign in to your Apple Account (read 2026-10-16)
Apple: Recover Your Apple Account (iforgot.apple.com) (read 2026-10-16)

Wrong step or changed screen? Report it. Never include passwords or codes.