Unofficial archive. This is a read-only, community-run archive of the Apple Support Community. It is not affiliated with or endorsed by Apple Inc.

Apple Account password changed by someone. Nothing else was altered. Any ideas?

Hi All


I had a curious experience a few weeks ago with my Apple Account.


Apple sent me an email advising my account password had been changed. This email took 24 hours to be generated, which in itself is curious. 


As I didn’t change the password I immediately sought to access my Apple Account to investigate. Initially, I was greeted with a ‘forgot password’ dialogue on my phone, another curiosity, as this had never happened before. Access was eventually forthcoming by way of entering my device passcode. 


I attempted to further determine the password situation by viewing my payment details, which requires the account password. Upon entering my password, the dialogue told me it was incorrect. Evidently, my password had been changed.


Immediately, I changed the password and checked that everything else was in order. Nothing, apart from the password, had been altered. 


I remember receiving alerts from Apple some years ago that someone was trying to access my account. These requests were denied. And that was as far as that went.


The email address associated with my Apple Account has an anomalous fullstop/period ([email protected] and [email protected]) that was somehow generated when I set up the email, and has created much confusion over the years. Could this have something to do with it?


I am wondering if someone with a remarkably similar email address has sought to log in to their Apple Account and accidentally accessed mine? Is that even possible? Or maybe the nefarious type trying to access my account wasn’t paying adequate attention to their nefarious activities, allowing me to secure it?


Since all this excitement, much securing activity has occurred, with the first thing to go being the spurious email address.


If anyone has any thoughts, I would love to hear them.


With thanks


:-)






2 replies

Swapping out that confusing email address was the absolute best move. By linking your Apple Account to a brand-new, unique email address, you have permanently severed the link to that "ghost" variation.

To ensure your account is completely locked down, let's verify a few details:

  • Do you currently have Two-Factor Authentication (2FA) enabled on your Apple Account?


Thanks for your reply.


Yep. 2FA was, and continues to be enabled, making the whole thing even more curious.


I've done a bit of searching online about nefarious types circumventing 2FA, and I can't honestly recall being exposed to any such circumstance.