Apple works hard to maintain a high level of security. But it’s still possible for your Apple Account, or Apple ID, to be hacked. It’s a prime target for criminals, as it allows them access to your personal information and lets them track your location. They can potentially see your iCloud content, and — most worryingly of all — access your saved payment methods, including credit cards and Apple Pay. We look at the signs that your Apple Account may have been hacked, the steps you should take to sort things out if it has, and how you can stay safer in future.
How To Tell If Your Apple ID Is Compromised
The most obvious sign that your Apple Account has been hacked is a message from Apple telling you that there’s been some sort of account activity that wasn’t carried out by you.
This might, for example, be access from a a device that you don’t recognise or a change to your password that you didn’t make. An unexpected two-factor authentication code could be sent to your iPhone, iPad or Mac. There could be messages you didn’t send or purchases on the App Store or iTunes that you didn’t make, or your device might be locked or placed in Lost Mode by someone other than you. Perhaps iCloud emails and iMessages show as read before you’ve opened them.
Sign 1: Unexpected Access
You may receive a notification from Apple that an unexpected device has accessed your account — or simply notice this yourself. The message should tell you the date and time of the login, along with the operating system and type of device used. Meanwhile, an unexpected two-factor authentication code could be sent to your iPhone, iPad or Mac.
Sign 2: A Password Change You Didn’t Make
If you attempt to log in and get the message that your password is incorrect, you should of course try again in case you’ve mistyped. If it happens repeatedly, though, it’s a sign that a hacker has gained access to your Apple Account and changed the password themselves, locking you out.
Sign 3: A Change To Your Contact Information
A hacker may change the email address or phone number associated with your Apple Account. If this happens, you should receive a message from Apple, saying that your account information has been updated.
Sign 4: Unusual Activity
You may spot unusual activity on your Apple Account, such as messages you didn’t send, or unexpectedly deleted items. There may also be purchase activity that you didn’t authorize, or new apps may be installed. iCloud emails and iMessages may show as read before you’ve opened them.
What Should You Do If Your Apple Account Is Hacked?
If you think your Apple Account has been hacked, the first thing you should do — and you should do it straight away — is change your password to something unique and hard to guess.
If you can’t change your Apple Account password — because a hacker already has — you should reset it. You should also update any personal or security information related to the account that isn’t correct or that you don’t recognize. Similarly, remove any devices you don’t recognise. Apple also advises that you should also check with your email provider and mobile network provider to make sure you’re still in control of every email address and phone number associated with your Apple Account.
Step 1: Change Your Password
Your first step should be to change your Apple Account password to something strong and hard to guess. If you can’t, you should be able to reset it through Apple support. And while you’re at it, turn on two factor authentication, if it isn’t already enabled.
Step 2: Update Account Information
Your next step should be to go to account.apple.com to check that your personal or security information is correct, and change any details you don’t recognize.
Step 3: Check Your Device List
Next, you should remove any unauthorized devices from your account. On your iPhone or iPad, open Settings, tap your name, and scroll down to see a list of all devices using your Apple ID. Check for any you don’t recognize and select them, then tap Remove from Account.
Step 4: Check With Other Providers
You should also contact your email provider and mobile network provider to make sure you’re actually in control of every email address and phone number associated with your Apple Account — making sure, for example, that SMS forwarding hasn’t been set up for a phone number associated with your Apple Account.
Step 5: Check For Signs Of Identity Theft
Check your financial accounts for activities that you don’t recognize, and query any that you find. And check through your emails for notifications of login attempts on other accounts such as Instagram, Facebook or Gmail.
How Can You Recover Your Apple Account?
The steps listed above should help you recover your Apple Account. However, if you find that you can’t reset your password or sign in, there’s a further recovery process.
Go to account.apple.com, then iforgot.apple.com and follow the instructions. You can do this on somebody else’s Apple device using the Apple Support app, or even at an Apple Store. You’ll need the email address or phone number associated with the account — and if you don’t have this information, there’s a chance you may never regain access, in which case you’ll need a new account. And, be warned, even if the process is successful, it may take several days before you can use your account again.
How Can You Protect Your Apple Account From Hackers?
Keeping your Apple Account safe from hackers is a question of basic cyber hygiene, and of taking advantage of the company’s existing security features.
Make sure you use a strong password, and that it’s one you don’t use anywhere else. Set up two-factor authentication. Ignore messages from phone numbers or email addresses that you don’t recognize or that are trying to scare you into doing something under pressure — scammers often pretend to be Apple support staff, so double-check if you receive any messages. Always use an antivirus package, and keep software up to date, so that you’re getting any security updates immediately.
Bottom Line
Apple’s famously high levels of in-built security mean that it’s pretty unlikely that your Apple Account will be hacked. However, it does sometimes happen. Luckily, though, it’s usually fairly straightforward to recover and protect your account.
