Step 1: Reset your Apple ID password
- On Mac: System Settings → [Your Name] → Sign-In & Security → Change Password
- Or visit iforgot.apple.com if you cannot sign in
- Use a strong, unique password — store it in a password manager
Step 2: Sign out unfamiliar devices
- System Settings → [Your Name]
- Click each device → Remove from Account for any you do not recognise
Step 3: Re-verify two-factor authentication
- Confirm only your trusted phone numbers are listed
- Generate new Recovery Contacts if you have any old ones
- Set up a Recovery Key for added protection
Step 4: Review iCloud Mail rules and payment methods
- iCloud Mail → Settings → Rules — delete anything you did not create (a common attacker trick)
- Apple ID → Payment & Shipping — remove unfamiliar cards
- Review subscriptions in App Store and cancel anything unknown
Was this guide helpful?
Know someone who needs this? Send them the guide.
JD
Written by
Jordan DicksonFounder, CyberSecurityGuides
Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.
Reviewed by CSG Security Engineers