Level 1 (4 points)

Apple ID Security flaw.

I haven't had an Apple device for yonks. I used to have iPhones but it must be ten years since I had one. I get an email the other day saying my Apple ID password was changed. At first I thought it was a phishing email but no its real. So out of curiosity I go and change my apple ID password and that all works fine. Except no it doesn't. You then try and login with the new password and it asks you to answer your security questions which low and behold have been changed and appear in Mandarin. So my password is changed but I can't access anything because of the security questions.

12 hours later I get another email saying the password has been changed again so I go back and change it but once again I cant go further because of the Mandarin security questions.

Long story shorty I eventually get to speak to Apple and get this. There is nothing they can do. They assure me the hacker can't do anything with the account because if they ever try to use it for a device they will be forced to use MFA as the security questions method was phased out years ago.

However as I pointed out to them if I ever decide to purchase another Apple device I am stuffed in terms of using my main email address as my Apple ID.

So much for Apple being super secure huh.

I searched on here and others have had the same issue with no resolution. I had to create a new account to post this on here.

Shocking.

Posted on Oct 23, 2026 2:55 AM

2 replies

Limnos

Level 10 (462,771 points)

Oct 23, 2026 3:25 AM in response to BingoFruitcake

It is more secure but you haven't been keeping up to date with your account settings.

In 2015 Apple transitioned to using two factor authentication instead of security questions. You can continue to use security questions if you already use them and they are working for you, but if you have problems then they no longer get direct support. You can try the directions in this support article If you forgot the answers to your Apple ID security questions - Apple Support but the article is labeled "archived" and may contain information that no longer applies. If the instructions work then fine; if they do not (e.g., you see “not enough information”*) then you will have no option but to change to the newer security method, if you can. Over the past few years Apple has been persistently encouraging users to switch to the newer two factor authentication security system. For those who have disregarded their encouraging, Apple will likely only help you to now change to two factor authentication, if even that is possible. Follow the instructions in the "Turn on two-factor authentication for your Apple ID" section in this support article --> Two-factor authentication for Apple Account - Apple Support to try to change to two factor authentication.

If you still need help, contact Apple Account support at this link ➞ https://getsupport.apple.com/?caller=cups&PGF=PGF63005

Select "Other Apple Account Topics", then "Security concerns or account compromised." This will give you a chat or telephone call option.

If Apple cannot, or will not, help you transition to two factor authentication then it is quite possible you will have to simply abandon the old account and everything it contained. In that case, if you were using the Find My service, the Activation Lock support request support article at: - https://al-support.apple.com/#/additional-support may at least let you regain use of your equipment. If not, you will also have to say goodbye to the device as well.

Good luck!

*More about identity verification problems here —> Cannot Reset Security Questions - Apple Community

BingoFruitcake Author

Level 1 (4 points)

Oct 23, 2026 7:42 AM in response to Limnos

Thanks but none of those options work. When you do eventually get to the "I forgot my security questions" the first thing it asks you when you want to reset your security questions is what is your security question! Incredible but true. Its a dormant account I forgot I had but there should at least be a way to secure it or just remove it.

I talked to Apple on the phone and in the end they simply said there is nothing they can do. So they know a hacker has compromised my account. They could easily confirm me with my phone number and email address to reset it all or even just delete the account but no. They won't do any of that.

Bizarre. Glad Im totally 365 Microsoft now. Their support is superb.

Originally posted at discussions.apple.com/thread/256381441