I'm traveling and suddenly received a Find My alert that played the usual sound on my iPhone. My Mac is safely at home, and the people who normally have access to my devices are traveling with me. I don't believe my Apple Account has been compromised, but the alert was unsettling. I also received two emails saying that sound alerts were triggered at the same time—one for my iPhone and one for my Apple Watch. Is there a way to see which device or account initiated the alerts, where they came from, or whether someone recently accessed my Apple Account?
3 Answers
Check Settings → your name and review every device listed under your Apple Account. If you see anything unfamiliar, remove it and change your Apple Account password immediately. Use a strong, unique password and make sure two-factor authentication is enabled. Apple may not provide a detailed history showing exactly who pressed Play Sound or their location.
Someone with your Apple Account email address and password may be able to use Find My, even if they don’t have one of your physical devices. Check your account’s device list and security settings, and review any Apple security notifications or emails around the time of the alerts. Since the alerts appeared for both the iPhone and Apple Watch, also check whether one of your signed-in devices or a family member’s device could have triggered them accidentally.
First confirm that the notification was genuinely from Apple and not a phishing message. Open Find My directly rather than following links in an email, then check your account and device list. If everything looks familiar but the sound played unexpectedly, contact Apple Support with the exact time and the alert emails; they may be able to determine whether it was an account action or a device-related glitch, although the user-facing tools usually don’t identify the person who initiated it.
The Mac is still at home and is password-protected, and nothing appears to have been disturbed. I’m mainly trying to find out whether Apple keeps a recent sign-in or activity log like some other services do.