Your Apple Account (previously known as your Apple ID) is a vital part of the Apple ecosystem. It does so many things, but because you have to log into it on so many devices, there’s always a risk of your account being compromised, even if you are careful.
How can you tell if your Apple Account has been hacked? And if so, what can you do to get back control? Here are a few things you should know in case your Apple Account has been compromised.
Warnings that your Apple Account has been compromised
Apple may alert you to any suspicious activity with your Apple Account, but depending on how it has been compromised, here are some warning signs that someone is making an unauthorized attempt to access your Apple Account:
Notifications. Apple sends a notification or an email when an attempt to log on from an unrecognized device, or when an attempt to change your password is made.
Unsolicited two-factor authentication code. You get a code that you did not request, or you did not perform an action that triggers a code.
Password failure. Your password stops working and messages appear that you need to input your password.
Unusual activity. You notice things are happening that you didn’t do, such as deleted files or sent emails or texts, or you may see an unfamiliar device in the Devices section of your Apple Account in Settings.
How to check if someone is using your Apple Account
Aside from the above warnings, one surefire way to see if someone has accessed your Apple Account is to check the devices associated with your account. When signing into your Apple Account on the web, you’ll see a Devices tab in the left column. Check it and you’ll see all devices that are connected to your Apple ID so you can check it for any unrecognizable ones. If you see any, you can click a device and click the “Remove from account button” to delete it. It’s a good practice to remove older devices as well in case you want to sell them or give them to a friend.
Apple Account information on the web at account.apple.com.
Foundry
How to regain control of your Apple Account
If you can’t log into your Apple Account and think someone else has control of it, here is what you can do to take back the keys.
Reset your Apple Account password. If someone else is trying to access your account, you’ll want to immediately change your password. You can do that on your device in Settings or by visiting https://iforgot.apple.com. If you suspect a hacker has already changed your password and you can’t change it back, you can take steps to recover your account at the same address.
Check your Apple Account information. On the web, go to account.apple.com, login, and examine the information. Change anything that may have been changed.
You can check the devices associated with your account on the iCloud website.
Foundry
Check your Mail and Messages apps: Make sure you still have control of the services that are associated with your Apple Account.
How to secure your Apple Account
If suspect any suspicious activity, you can take a few steps to make sure you are back in control of your Apple Account. These are good to implement even of your account hasn’t been compromised.
Setting up two-factor authentication can be done in Settings > Apple Account > Sign-in & Security > Two-Factor Authentication.
Foundry
Check your user info. In Settings, your Apple Account info is at the very top. It should display your name, and when you tap it, you should see your name and the email address associated with the account. In your Apple Account settings, check the Sign-In & Security info and make sure the email and phone numbers match your info.
Set up two-factor authentication. In your Apple Account Settings > Sign-in & Security, you can activate two-factor authentication. When you log into your account, a notification on your trusted devices appears to alert you of the login. You’ll need to enter a six-digit code to authorize the action.
Use a security key. For extra protection, you can use a security key that either plugs into the USB-C port on your iPhone or Mac or connects wirelessly via NFC. A security key is a keychain-sized hardware device that stores the credentials of your online accounts and connects to your device when you need to log into your Apple Account or other online account.
Here are more guides to help you with your Apple Account (Apple ID).
Author: Roman Loyola, Senior Editor, Macworld
Roman is a Macworld Senior Editor with over 30 years of experience covering the tech industry, focusing on the Mac and other products in the Apple ecosystem. He is also the host of the Macworld Podcast. His career started at MacUser, where he received Apple certification as a repair technician (when Apple did that kind of thing). He's also worked for MacAddict, MacLife, and TechTV.