I'm locked out of my Apple Account even though I know the password, can access the account email, have both a trusted iPhone and Mac, can generate six-digit verification codes from the Mac, verified the email address, and confirmed the payment card on the account. Despite all of that, the recovery process still requires a reachable phone number for text messages. I currently don't have access to one, although the process appears to allow a different person's number to be used. What security purpose does this additional contact number serve that two trusted devices, a password, email verification, payment verification, and Apple-generated codes do not? I also tried changing the password through the Mac's settings, but that process stalled, so I only started account recovery afterward.
2 Answers
A locked account may trigger a separate recovery workflow even when some trusted-device functions still work. Apple’s systems can treat generating a verification code and approving an account recovery as different security actions. The phone number may be used as an independent recovery channel, but it doesn’t necessarily mean Apple considers it more trustworthy than your devices.
If you can still sign in on a trusted device, the normal route is usually Settings > your name > Sign-In & Security > Change Password. You can also manage two-factor authentication and add a new phone number there. Account recovery is generally intended for situations where those normal verification methods aren’t available, so starting recovery while the devices remain usable can lead to confusing or stricter checks.
I tried changing the password from Settings first. The Mac accepted its login password, but the password-change process stalled indefinitely. I started recovery only after that trusted-device route failed, and I haven’t completed recovery.