How to Tell If Your Apple ID Was Compromised on Your Mac

Confirm whether someone else has signed into your Apple ID.

JDCS

By Jordan Dickson · Reviewed by CSG Security Engineers

Updated June 2026 · 1 min read

Symptoms

You received an Apple email about a new sign-in from a device or location you do not recognise
Your Apple ID password was changed without your action
Find My shows a Mac, iPhone or iPad you do not own
iCloud purchases or App Store charges you did not make
iCloud Mail rules you did not create

Check from your Mac

System Settings → [Your Name] at the top
Scroll down to see every device signed into your Apple ID
Click any device for its last-known location and trust status
Sign out of any device you do not recognise

Cross-check at appleid.apple.com

Go to appleid.apple.com and sign in
Review Sign-In and Security → Account Recovery
Review trusted phone numbers — remove any you do not recognise

Tags:

Was this guide helpful?

Know someone who needs this? Send them the guide.

JD

Written by

Founder, CyberSecurityGuides

Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.

Reviewed by CSG Security Engineers

More from Device Security

How to Secure Your Microsoft Account

Lock down the Microsoft account behind your PC, Xbox and inbox: password, two-step verification, sign-in activity, app access and recovery details.

How to Tell If Your Microsoft Account Has Been Compromised

Quick checks to confirm whether someone else has been inside the Microsoft account behind your PC, Xbox and inbox — and how to close every foothold.

How to Recover Your Microsoft Account After Being Hacked

How to get back into a hacked Microsoft account — the sign-in you use for Windows, Xbox, Office and Outlook — and what to do straight after.