4 ms·
Not sure if it’s a valid data point or not. I manage 7 people’s Apple ID accounts. This has happened a few times including twice last night but only on the peop
by cjk2 2y ago
Not sure if it’s a valid data point or not. I manage 7 people’s Apple ID accounts. This has happened a few times including twice last night but only on the people who use the @icloud.com as their primary email address. Assume that is related to password guessing attacks. Both addresses are in public email leak databases.
Can only advise that you should have recovery contacts and a recovery key set up in case something goes wrong.
- throwaway290 2y ago> If you lose your recovery key and can't access your devices, Apple won't be able to help you regain access to your account or your data. Seems like a dangerous advice for a regular person who can just go to Apple and get stuff back?
- cjk2 2y agoQuite possibly. But it’s roll dice and hope Apple will fix it or guaranteed have a way out. Regular person can’t even remember their email address so a good point though.
- throwaway290 2y agoCan you disable recovery key later? I ask because Apple's docs helpfully say > If you decide to stop using a recovery key, follow the steps above on your device and turn off recovery key. When you do, you can use account recovery to regain access to your Apple ID. But the "steps above" only describe how to turn it on, not off. Edit: thank you.
- cjk2 2y agoThere is an option to disable it but I’ve never tried it. So I assume yes.
- quitit 2y agoI’d say your guess is right - the accounts typically get locked because hacking groups are running attacks on lists of email addresses. The email addresses ending in @icloud.com are scraped from a master list and the attack is directed to apple, while the custom domains are ignored because there is work involved in figuring out where those are hosted. iCloud lets the user generate secondary email addresses, it’s better to use that and keep the login email address secret.