Apple Account Compromised? Change Your Password and Regain Control

Do these three things first

1. Do not approve an unfamiliar sign-in or give anyone a verification code.
2. On a trusted iPhone that is still signed in, open Settings > your name > Sign-In & Security > Change Password. On Mac, use System Settings > your name > Sign-In & Security.
3. Sign in at account.apple.com, review your personal and security details, then remove devices you do not recognize.

Type Apple addresses yourself instead of signing in through a link in a suspicious message.

Regain control step by step

1. Change the password

Use a strong password that you do not use for email or any other site. If you can no longer sign in, go directly to iforgot.apple.com. Follow the account-recovery prompts if your identity cannot be verified immediately.

2. Review security information and devices

At account.apple.com, verify trusted phone numbers, email addresses, and two-factor authentication. Open Devices, inspect each entry, and remove anything unfamiliar. Check carefully before removing an older device that you still own.

3. Secure your email and phone number

Change the password for the email account associated with Apple, enable its two-factor authentication, and ask your carrier to check for an unauthorized SIM/eSIM transfer or message forwarding. Otherwise, an attacker may be able to restart account recovery.

4. Investigate unknown purchases

On iPhone, open Settings > your name > Media & Purchases > View Account > Purchase History. Check with Family Sharing members first. If the charge is still unfamiliar, use Apple’s Report a Problem service or contact Apple Support; contact the card issuer immediately if the card has other unauthorized charges.

Avoid these mistakes

• Never share your password, device passcode, recovery key, or verification code with someone claiming to be support.
• Do not install remote-control software to “cancel” a transaction.
• Do not repeatedly restart account recovery; changes to recovery information can delay it.
• For a missing iPhone, use Find My first. Removing it from your account can remove Activation Lock.

You are finished only after the new password works, all trusted details are correct, the device list contains only known devices, and unfamiliar sign-in alerts have stopped.