My iPhone suddenly prompted me to verify my Apple account. When I entered my password, it was rejected, and shortly afterward I received an email saying the password had been changed. I selected the option saying the change wasn't mine, entered my trusted phone number, and successfully received the verification code. However, the reset process now asks for a recovery key, which I never enabled. I suspect someone accessed my account and turned on recovery-key protection, leaving me locked out. The support instructions keep sending me back to the same reset page. What options do I have to recover my account and protect my data?
4 Answers
Double-check that the alert was genuinely generated by the phone’s Settings app and not a fake webpage or message designed to capture your password. Since you were redirected into Settings and then received a legitimate password-change email, treat the account as compromised anyway and work only through Apple’s official support and recovery channels.
Think about whether anyone recently had access to a signed-in device. An older iPhone that was sold could be relevant if it wasn’t properly removed from the account before changing hands. Even if the buyer says they removed it, review every device listed on your account and secure the device passcode, email account, and phone number associated with it.
I found out that an old iPhone X had been sold a few months ago. I’m trying to confirm whether it was fully removed from my account, since it may explain how someone got access.
Contact Apple Support directly and explain that the password and recovery-key settings were changed without your permission. If any of your Apple devices are still signed in, don’t erase them or sign out yet; a trusted device may be important for proving ownership. Also change passwords for your email and other accounts connected to this Apple account, and check for suspicious activity or payment changes.
A recovery key normally makes account recovery much more difficult, so the official support team may be your only realistic route. Keep records of the account details, trusted phone number, purchase information, and the approximate time the changes happened. Be cautious of anyone offering to recover the account for a fee.
It appeared as a system banner and opened Settings, so it seemed genuine. I’ve opened a support case because I’m especially worried about losing my iCloud data.