An Alert Says Someone Signed In to Your Apple Account
A message says your Apple Account was used on a device you do not know. First check it is real, then remove the device and change your password. Photos in iCloud are the main thing at risk.
Get an email when Cryptile is on the App Store
What do I need to know?
- Some alerts are fake. Scam emails and texts copy Apple's look. Do not tap their links.
- Check inside Settings. Real devices on your account are listed there.
- Your photos follow your account. If iCloud Photos is on, whoever signs in can reach that library.
How do I check on my iPhone?
- Open Settings and tap your name at the top.
- Scroll down to the list of devices.
- Tap any device you do not recognise.
- Tap Remove from Account and confirm.
How do I lock the account down?
- In Settings, tap your name, then Sign-In & Security.
- Tap Change Password and choose a new, long one.
- Make sure Two-Factor Authentication is on.
- Review Trusted Phone Numbers. Remove any that are not yours.
- Go to appleid.apple.com later on a computer and check the account there too.
If the alert came by email or text, delete it. Open Settings yourself instead of following its links.
What can someone see once they are in?
With your password and a code, they can reach what your account syncs. That can include iCloud Photos, Notes and backups.
Advanced Data Protection narrows what Apple can read, but it does not stop a signed-in device from seeing your library. See the guide linked below.
What should I move out of iCloud?
- Private photos and videos. Keep them out of Camera Roll.
- Scans of ID and tax papers. They are the most useful to a thief.
- Sensitive notes. Lock them, or keep them in a vault.
Delete the originals from Photos, then from Recently Deleted.
What this doesn't protect against
A vault cannot stop someone who is already in your account from seeing what is in Photos. It does not remove copies already synced or saved. It does not undo a leak that has already happened. If a thief gets the unlocked, open app, they can see what is inside.
Do it with Cryptile
Cryptile files are encrypted with a key made on your device from a pattern, so a stolen Apple Account does not hold that key. There is no account and no server, and the developer never holds keys. Use 8 or more cells, and write down the 9-word recovery phrase.
Cryptile is free to start, with encrypted iCloud backup included. Cryptile Send, Files access and shared vaults are coming and are not available yet.