I suddenly received an alert on my iPhone asking me to verify my Apple Account. I entered my password, but it was rejected. Shortly afterward, I received an email saying the password had been changed. I selected the option indicating that I didn't make the change, entered my trusted phone number, and successfully entered the verification code. However, the recovery process now asks for a recovery key, which I never knowingly enabled. I suspect someone accessed my account and turned on a recovery key, leaving me locked out. The recovery instructions keep sending me back to the same reset-password page, where I can't continue without that key. What steps should I take to recover my account and protect my iCloud data and other connected accounts?
4 Answers
Since the alert appeared as a system banner and opened the Settings app, it sounds more like a genuine Apple notification than a fake webpage. Still, don’t use links from unexpected emails or messages while troubleshooting. Open Settings or Apple’s official support site yourself, change passwords for your email and other linked services, and watch for unauthorized purchases or account changes.
Think about whether anyone recently had access to a trusted iPhone or another Apple device. An older iPhone that was sold while still signed in could potentially have allowed someone to change the account settings. Even if the buyer says they removed the account, tell Apple Support about the device and sale, and review the account’s device list and security history if you still have access anywhere.
Contact Apple Support directly and explain that the password was changed and a recovery key may have been enabled without your permission. Avoid repeatedly signing out of devices that are still logged into the account, because a trusted device could be essential for proving ownership and recovering access. Also secure any email, payment, or other accounts connected to your Apple Account, and check your signed-in devices for anything unfamiliar.
A recovery key makes account recovery much more difficult, especially if someone enabled it after gaining access. Apple Support is the appropriate next step, but be prepared for them to verify ownership carefully; there may not be a simple bypass if the recovery key was legitimately activated.
I’ve opened a case with Apple Support. I’m really worried about losing my iCloud storage and personal information, so I’m hoping they can verify that I’m the account owner.
I discovered that an old iPhone X had been sold to someone a few months ago. The buyer says they removed my account and didn’t change anything, but I’m still reporting the device and circumstances to Apple Support.