The fastest way back in: use your trusted device or recovery email
If you have an iPhone, iPad, or Mac that you've already signed into with your Apple ID, that device can reset your password without you needing to remember it. Go to Settings (or System Preferences on Mac), tap your name at the top, then tap Password & Security. Choose Change Password and follow the prompts — your device will verify who you are using Face ID, Touch ID, or your device passcode, then let you create a new one.
If you don't have a trusted device nearby, your recovery email is the next fastest route. Go to iforgot.apple.com, enter your Apple ID (usually your email address), and choose "I don't have my password". Apple will send a reset link to the recovery email address on file. Click that link, create a new password, and you're back in. This usually takes a few minutes.
Both of these routes work because Apple already knows who you are — you've proven it before on that device, or you control the recovery email address. You don't need to remember anything except how to unlock the device or access your email.
Key Takeaways
- A trusted device you've already signed into can reset your password using Face ID, Touch ID, or your device passcode — no memory required.
- Your recovery email address receives a password reset link that works within minutes, as long as you can still access that email account.
- If you've lost access to both your trusted devices and recovery email, you'll need to answer security questions or use a recovery key you saved earlier.
- Apple's account recovery process can take several days if you have no other proof of identity, so plan ahead by saving a recovery key now.
- Two-factor authentication protects your account but also means you need access to a trusted device or phone number to reset your password.
What to do if you don't have a trusted device or recovery email
If you can't use either of those routes, Apple will ask you to answer security questions you set up when you created your account. These are questions like "What was the name of your first pet?" or "What city were you born in?" You'll need to answer at least two correctly. If you remember the answers, you can create a new password right away.
If you don't remember your security questions either, Apple can verify your identity another way: by sending a verification code to a phone number associated with your account. This is usually the phone number you use for two-factor authentication. If you still have access to that phone, you can receive the code and reset your password.
When none of these work, Apple moves to manual account recovery. You'll answer questions about your account history, the devices you've owned, and your payment methods. This process can take several days because Apple reviews your answers by hand. Have your receipt or order confirmation from any Apple purchases ready — it helps speed things up.
Using a recovery key if you saved one earlier
If you created a recovery key when you first set up two-factor authentication, that key can reset your password without needing anything else. A recovery key is a 28-character code that Apple gives you once, and you're supposed to write it down and store it somewhere safe — not on your computer or phone.
Go to iforgot.apple.com, enter your Apple ID, and when asked how you want to reset your password, choose "I have a recovery key". Enter the key and create a new password. This works when ready, even if you've lost access to all your devices and emails.
If you never saved a recovery key and you're now locked out, you can't go back and create one — you'll have to use one of the other recovery methods. This is why Apple pushes you to save the key when you first turn on two-factor authentication. If you do get back into your account, save a recovery key when ready so you never face this situation again.
What happens during Apple's manual account recovery
If you've exhausted the faster routes, Apple's support team will take over. They'll ask you to verify your identity by answering questions about your account — when you created it, what devices you've registered, what payment methods you've used, and sometimes details about specific purchases.
This process exists because Apple takes security seriously. They won't reset your password for anyone who calls up claiming to be you — they need proof. The downside is that it takes time, usually three to five business days. During this period, you won't be able to access iCloud, iMessage, or any Apple services tied to that ID.
To speed things up, have these documents ready: your original device receipt or order confirmation, a credit card statement showing a purchase you made through Apple, or any email confirmation from Apple about your account. The more proof you can show, the faster the review goes.
Protecting yourself from lockouts in the future
The best time to prepare for a forgotten password is right now, before you need it. Turn on two-factor authentication in Settings > [Your Name] > Password & Security, then when ready save your recovery key somewhere you'll remember — a safe, a notebook in a drawer, or a password manager. Don't take a screenshot or email it to yourself; write it down or store it in a tool designed for secrets.
Add a recovery email address that you actually use and check regularly. This should be a different email from your Apple ID — if your Apple ID is gmail.com, your recovery email might be your work email or a Yahoo account. Test it once by sending yourself a message to make sure you still have access.
Keep at least one device signed into your Apple ID at all times. This doesn't have to be your main phone — an old iPad or Mac you keep at home works fine. That device becomes your fastest way back in if you forget your password on your primary phone.
Why two-factor authentication makes password recovery harder
Two-factor authentication adds a security layer: when you try to sign in from a new device, Apple sends a code to a device you've already trusted. This stops someone else from breaking into your account even if they know your password. The trade-off is that if you lose access to all your trusted devices, resetting your password becomes harder.
You can't turn off two-factor authentication for your Apple ID if you use iCloud, Apple Pay, or any modern Apple service — it's required. But you can add more trusted devices and recovery methods so you're never completely locked out. The goal is to have at least two ways to prove who you are: a trusted device, a recovery email, a recovery key, or a phone number.
Frequently Asked Questions
How long does it take to reset my password through my recovery email?
Usually a few minutes. Apple sends the reset link to your recovery email address, and you can click it and create a new password right away. The slowest part is usually checking your email inbox or spam folder.
Can I reset my iCloud password on my iPhone if I don't remember it?
Yes. Go to Settings > [Your Name] > Password & Security > Change Password. Your iPhone will verify you using Face ID, Touch ID, or your device passcode, then let you create a new password without needing to remember the old one.
What if I lost the phone number associated with my account?
You can update your phone number in Settings > [Your Name] > Password & Security > Two-Factor Authentication, then choose Edit. Add a new phone number you have access to. If you're locked out and can't access Settings, you'll need to use your recovery email or recovery key instead.
Is there a way to skip the security questions during recovery?
Not if you're locked out. Security questions are one of Apple's ways to verify you're the real account owner. If you can't answer them and don't have a recovery key or trusted device, Apple will move to manual account recovery, which takes longer but doesn't require you to remember anything.
Can I recover my password if I don't have access to my recovery email anymore?
Yes, but it takes longer. You'll need to use a trusted device, a recovery key, security questions, or a phone number on your account. If none of those work, Apple's support team can verify your identity manually, though this process takes several days.