Research-checked Last researched: 30 October 2026

Apple Account security, in ten minutes

By the iphonefix.us editorial team · Research-based, last researched 30 October 2026.

Illustration of Apple Account security settings

Most Apple Account disasters do not start with a hacker breaking encryption. They start with something boring: a password reused from a leaked site, an old phone number still listed as trusted, or a convincing text message asking you to sign in. This checklist takes about ten minutes, and it prevents the exact lockouts this site writes about every week.

1. Turn on two-factor authentication

Settings, your name, Sign-In and Security, Two-Factor Authentication. If it is off, turn it on. From then on, signing in from a new device needs your password plus a code sent to a trusted device or number.

2. Check your trusted devices and numbers

In the same Sign-In and Security area, look at every device signed in to your account. Sign out anything you sold, lost, or do not recognise. Then check your trusted phone numbers — remove an old SIM number you no longer own, and add a current one. An old number left in place is an open door.

3. Add a recovery contact

Pick one trusted person and set them as a recovery contact. If you are ever locked out, they can generate a six-digit code for you. They cannot see your photos, messages, or passwords — the code is all they can provide, and only when you ask for it.

4. Decide about a recovery key

A recovery key is a 28-character code that replaces Apple's standard recovery process. It is powerful, and it is unforgiving: if you lose the key and lose access, Apple cannot provide it for you. Only use one if you will store it safely offline, somewhere you will actually find it in a year.

5. Spot the phishing message

Apple will never text you a link asking you to sign in urgently, and will never phone you to ask for a password or verification code. If a message claims your account will be closed today, type iforgot.apple.com or apple.com into your browser yourself instead of tapping the link. The urgency is the scam.

6. Use a unique password, and write it down safely

Your Apple Account password should exist nowhere else. A password manager is the practical way to do that; a notebook kept at home is better than reusing the same password across ten sites. Either beats the alternative, which is one leak handing over your phone, photos, and backups at once.

Frequently asked questions

What is the single most important Apple Account security setting?

Two-factor authentication. Without it, a password alone protects everything. With it, a stranger needs your password and a code from a device or number you control.

What is a recovery contact, in plain words?

A trusted person — a family member or close friend — who can give you a six-digit code if you are locked out. They never get access to your account itself.

What should I do if I see a device I do not recognise?

Sign it out from your Apple Account settings immediately, change your password from a trusted device, and check that your trusted phone number is still yours.