How to Tell If Your Apple ID Was Compromised on Your Mac

Check sign-in history, devices, and security alerts to confirm Apple ID compromise.

6 min read · Beginner friendly

Symptoms

• You received an Apple email about a new sign-in from a device or location you do not recognise
• Your Apple ID password was changed without your action
• Find My shows a Mac, iPhone or iPad you do not own
• iCloud purchases or App Store charges you did not make
• iCloud Mail rules you did not create

Check from your Mac

1. System Settings → [Your Name] at the top
2. Scroll down to see every device signed into your Apple ID
3. Click any device for its last-known location and trust status
4. Sign out of any device you do not recognise

Cross-check at appleid.apple.com

1. Go to appleid.apple.com and sign in
2. Review Sign-In and Security → Account Recovery
3. Review trusted phone numbers — remove any you do not recognise