"Your Apple ID has been locked for security reasons." "Sign in to iCloud — Activation Lock." Two of the most stressful messages an iPhone or Mac owner can see — and they are not the same problem. Confusing them wastes hours. This guide first helps you tell which one you are facing, then gives the exact steps to recover access to each.
Locked Apple ID vs. iCloud Activation Lock — Know Which You Have
This single distinction decides everything:
- Locked Apple ID — You see "Apple ID locked" or "disabled" when signing in to iCloud, the App Store, or apple.com. The account itself is frozen. Fix: verify your identity and reset the password. Usually quick.
- iCloud Activation Lock — After erasing or buying a device, it shows the activation screen asking for a specific Apple ID and password. This is Find My protecting the device against theft. Fix: only the original owner (or Apple, with proof of purchase) can remove it.
Part 1 — Unlock a Locked Apple ID
Do this from a trusted device on a secure network where possible — it dramatically improves your chances.
Go to iforgot.apple.com
Enter your Apple ID email. Apple will offer the verification methods tied to your account — a trusted phone number, a trusted device, your recovery key, or a recovery contact. On an iPhone you already own, Settings → [your name] → Sign-In & Security → Change Password does the same thing faster.
Verify with a trusted phone number or trusted device
If you still receive texts/calls on your trusted number, Apple sends a code. On a trusted device (another iPhone, iPad or Mac signed in to the same Apple ID), you can approve the reset with that device's passcode. Either path unlocks the account in minutes.
Use your recovery key or recovery contact
If you set up a 28-character recovery key, enter it to reset your password. If you added a recovery contact, ask them to open Settings → [their name] → Sign-In & Security → Account Recovery and generate a code for you.
Locked out and stuck? Skip the trial-and-error.
Our certified bilingual tech remotes in, walks you through every recovery step, and secures the account on the spot — same day, from $59. No fix, no fee.
Part 1b — When You Have No Trusted Device or Number: Account Recovery
If you have lost access to every verification method, Apple falls back to Account Recovery — a deliberate waiting period (often several days) during which Apple confirms no one else is trying to seize the account.
- Start it at iforgot.apple.com and follow the "request account recovery" flow. Provide a phone number where Apple can reach you when it completes.
- Speed it up by completing the request on a device that was previously signed in, or by confirming a credit/debit card on file with Apple.
- Add nothing new and stay patient — trying repeatedly from new devices can extend the wait. Apple notifies you by text/call when access is restored.
Part 1c — If a Hacker Took Over Your Apple ID
If someone changed your password, your trusted phone number, or remotely locked your devices and demanded payment:
- Start Account Recovery immediately and contact Apple Support directly. Apple can verify you through purchase history and billing.
- Never pay a ransom to "unlock" your own devices. A device locked through a hijacked Apple ID is released the moment you recover the account.
- Gather proof of purchase (receipt or invoice showing the device serial number) — this is your strongest evidence of ownership.
- Once back in, change the password, remove unknown trusted phone numbers, sign out all sessions, and check Find My for devices you do not recognise.
Need This Fixed Right Now?
IT Cares recovers locked and hijacked accounts remotely — usually in 30 minutes or less, from $59. No fix = no charge.
Part 2 — iCloud Activation Lock on a Device
Activation Lock is theft protection: when Find My is on, erasing the device still requires the owner's Apple ID to reactivate it. To remove it legitimately:
If it's your device and you know the Apple ID
Simply sign in with that Apple ID and password on the activation screen. If you forgot the password, recover the Apple ID first (Part 1), then activate.
If you bought it second-hand and it's still locked
Contact the seller and ask them to remove it remotely from iCloud.com → Find Devices → select the device → Remove from Account. Until they do, the device cannot be activated by anyone else — by design.
If the seller is unreachable
Bring a valid proof of purchase (original receipt with the device serial/IMEI and the seller's details) to Apple. Apple can review the request and remove Activation Lock when ownership is genuinely established. There is no legitimate shortcut around this.
Secure Your Apple ID Against Future Lockouts
Keep two or more trusted devices/numbers
The more verification options Apple has on file, the less likely you ever need the slow Account Recovery path. Add a second trusted phone number you control.
Generate and safely store a recovery key
Settings → [your name] → Sign-In & Security → Recovery Key. Write the 28-character key down and store it offline. It is the fastest self-service way back in.
Add a recovery contact
Choose a trusted family member or friend who can generate a recovery code for you from their own Apple device.
Use a strong, unique password + keep two-factor on
Never reuse your Apple ID password elsewhere, and keep two-factor authentication enabled. Apple ID is the master key to your photos, backups, payments and devices.
When to Call IT Cares
Many Apple ID lockouts resolve with the steps above. Reach out when:
- You are stuck in Account Recovery and want help assembling the right ownership evidence to move it along.
- A hacker hijacked your Apple ID and locked your devices — we coordinate recovery and secure your linked accounts.
- You bought a device with Activation Lock and need help determining whether it can be legitimately cleared.
- You want a full security clean-up after a takeover (email, banking, 2FA across all accounts).
IT Cares connects remotely, verifies the situation, and guides you through Apple's official channels — same day, anywhere in Canada. We never use shady "unlock" tools.
How Long Account Recovery Really Takes — and How to Shorten It
The waiting period is the part that frustrates people most, so it is worth understanding. Apple does not publish a fixed number because the wait is dynamic: it depends on how much verifiable information you provide and how risky the request looks. In practice we see anything from a few hours to about two weeks. The clock is intentional — it is the window Apple uses to make sure a thief who stole your password cannot rush the account away from you.
You can meaningfully shorten it:
- Start the request from a device that was previously signed in to your Apple ID. A recognised device is the single strongest trust signal.
- Confirm a payment card on file when prompted — matching billing details speeds verification.
- Do not start multiple recovery requests from new devices. Each fresh attempt can reset or extend the timer because it looks like someone fishing for access.
- Keep the contact phone number reachable. Apple notifies you by call or text the moment recovery completes; a missed window can add delay.
Once it is running, the best thing you can do is leave it alone and wait for Apple's notification.
Buying a Used iPhone or Mac: The Activation Lock Checklist
The most heartbreaking version of this problem is discovering Activation Lock after you have paid for a second-hand device. Avoid it entirely with a 60-second check before money changes hands:
- Have the seller fully erase the device in front of you (Settings → General → Transfer or Reset → Erase All Content and Settings) and set it up to the home screen. If it asks for the previous owner's Apple ID at any point, it is still locked — walk away.
- Confirm Find My is off and the device is removed from their account before you leave.
- Get a real receipt with the device serial number and the seller's name and contact details. Without it you have no path to Apple if a problem surfaces later.
- Be sceptical of "iCloud locked, sold for parts/as-is" listings — a locked device cannot be legitimately activated, so you are usually buying an expensive paperweight.
Why "iCloud Unlock" Services Are a Scam
Search results and ads are full of services promising to remove Activation Lock for a fee. Understand clearly: there is no legitimate remote way to bypass Activation Lock. The lock is enforced on Apple's servers, not on the device, so no software run locally can defeat it. What these services actually are:
- Outright payment theft — you pay, nothing happens, they vanish.
- Phishing fronts that harvest the Apple ID and personal details you hand over, then use them elsewhere.
- Stolen-credential or fraud operations that may briefly "unlock" a device using someone else's compromised account — leaving you with a device that re-locks and possibly ties you to fraud.
The only real routes remain the two legitimate ones: the original owner removes the device from their account, or Apple removes the lock after you present a valid proof of purchase. Anything else is a trap.
Recovery Key vs. Trusted Phone vs. Recovery Contact
Apple gives you several ways back in, and the right mix prevents the slow Account Recovery path. Here is how they compare:
- Trusted phone number — easiest day to day, but useless if you lose the number, travel without it, or get SIM-swapped. Keep at least one, ideally two.
- Trusted device — any Apple device signed in to your ID can approve a reset with its passcode. Excellent if you own more than one Apple device.
- Recovery key — a 28-character code you generate and store offline. The most robust option, but if you turn it on and then lose it and your devices, recovery becomes very hard. Treat it like a passport.
- Recovery contact — a trusted person who can generate a code for you. Great as a human fallback that does not depend on your own hardware.
If Your Devices Were Locked for Ransom
A growing scam: an attacker who phished your Apple ID signs in, enables Lost Mode on your iPhone or Mac through Find My, and posts a message demanding payment to "unlock" it. Do not pay — paying funds the crime and rarely releases anything. The device is locked by your own account, so the fix is to take the account back (Part 1 above) — the moment you regain control and change the password, you can turn off Lost Mode yourself. Start Account Recovery, contact Apple Support with your proof of purchase, and report the extortion to local police; a remote lock has no power once the account is yours again.
Apple ID Security Checklist — Save This
- Two-factor authentication on, with two trusted phone numbers.
- A recovery contact added (and, if you can store it safely, a recovery key).
- A strong, unique Apple ID password used nowhere else.
- Find My enabled on every device (your own theft protection).
- A note of which devices are signed in — review it occasionally and remove any you no longer own.
- Healthy scepticism toward any "Apple" email or text asking you to "verify" your ID — go to the device Settings, never a link.
Need This Fixed Right Now?
IT Cares recovers locked and hijacked accounts remotely — usually in 30 minutes or less, from $59. No fix = no charge.
Frequently Asked Questions
Apple locks an Apple ID after too many failed password attempts or activity it judges suspicious, such as sign-ins from unfamiliar places. It is a protective measure, not proof you were hacked. Unlock it at iforgot.apple.com by verifying with a trusted phone number, trusted device, recovery key, or recovery contact.
A locked Apple ID is an account problem you fix by resetting your password and verifying identity. An iCloud Activation Lock is a device problem: Find My ties the device to a specific Apple ID, so it asks for that Apple ID after a reset. Activation Lock can only be removed by the original owner or, with proof of purchase, by Apple.
With a trusted device or phone number you can reset access in minutes. Without any of those, Apple starts Account Recovery, which can take several days while it confirms an attacker is not the one requesting access. Verifying on a trusted device or a payment card on file can shorten it.
Start Account Recovery at iforgot.apple.com immediately and contact Apple Support with proof of purchase. Never pay a ransom to unlock your own devices — a remote lock placed through a hijacked Apple ID is reversed once you regain the account.
Avoid them. Paid iCloud/Apple ID unlock services are overwhelmingly scams or use stolen credentials and cannot legitimately remove Activation Lock. The only legitimate paths are the original owner removing the device, or Apple removing it after a valid proof of purchase.

Comments
Bought a used MacBook that turned out to still be Activation Locked. This article saved me from a fake ‘unlock service’ — I went back to the seller, they removed it from Find My in two minutes, and it activated instantly. Lesson learned: always check before buying.
Someone got into my Apple ID, changed my password and locked my iPhone with a ransom note. IT Cares connected remotely, helped me start Account Recovery with my purchase receipt, and walked me through securing my email and bank logins too. Got everything back without paying a cent to the scammer.
Leave a Comment