A hacked Apple ID can expose iCloud, App Store purchases, Find My, Apple Pay-related settings, subscriptions, photos, and devices tied to the account. Act quickly, starting with whether you can still sign in.
Does this affect you?
Use this if your Apple ID password stopped working, you received sign-in alerts you did not trigger, unfamiliar devices appeared, or App Store charges showed up without your permission.
You can still sign in: secure it yourself
Do these steps immediately and in order.
- Go to appleid.apple.com, or open Settings > your name on an iPhone or iPad.
- Open Sign-In & Security or Password & Security and change the password to one you do not use anywhere else.
- Review the device list and remove anything you do not recognize.
- Check trusted phone numbers and recovery options. Remove numbers or contacts you do not control.
- Review purchase history for App Store, iTunes, subscriptions, and media purchases you did not make.
- Check Family Sharing to make sure no unfamiliar person was added.
You are locked out entirely
Use Apple’s recovery flow when the password no longer works.
- Go to iforgot.apple.com in a browser.
- Enter your Apple ID email address and follow Apple’s prompts.
- Use a trusted phone number, another signed-in Apple device, security questions if your account still has them, a Recovery Contact, or a Recovery Key if available.
- Set a new password as soon as Apple verifies you.
- If none of the quick methods work, begin Apple Account Recovery. It can take several days, and the waiting period cannot be skipped.
- When access returns, complete every security step from the previous section.
More control
Report unauthorized purchases
Check your Apple purchase history and any card or Apple Cash statements tied to the account. Use Apple’s official refund/report flow for purchases you did not authorize.
Check Find My and iCloud activity
If a device was located, locked, or erased without your permission, or files and photos appear disturbed, write down dates and details before contacting Apple Support.
Understand Recovery Key responsibility
A Recovery Key is powerful but strict. If you enable it, losing the key and trusted devices can permanently block recovery, because even Apple may not be able to override it. Store it somewhere safe offline.
Change reused passwords
If the Apple ID password was reused on any other site, change those accounts too. Many takeovers begin with passwords leaked from unrelated breaches.
Sources
- Apple Support – If you think your Apple ID has been compromised (2025)
- Apple Support – Apple ID account security (2025)
- Apple Support – Reset your Apple ID password (2025)