Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

McScooby

macrumors 65816
Oct 15, 2005
1,275
819
The Paps of Glenn Close, Scotland.
He doesn’t have 2FA turned on. He is stuck with no way out.

If you can't unlock your Apple ID​

If you use security questions with your Apple ID, or if you don't have access to a trusted device or phone number, go to iforgot.apple.com. Then you can unlock your account with your existing password or reset your password. After multiple unsuccessful attempts to unlock your account, your Apple ID will remain locked and you can try again the next day.
Published Date: July 08, 2020

So he knows the password (as mail gives access). If you're unsure how the password is spelled use keychain access on the mac to unlock the spelling.

Take this password to iforgot, which unlocks the account using the password and other questions about your account which will allow you to change the security questions and add 2FA, what am I missing?
 

Henk van Ess

macrumors demi-god
Original poster
Aug 20, 2008
314
241
Amsterdam

If you can't unlock your Apple ID​

If you use security questions with your Apple ID, or if you don't have access to a trusted device or phone number, go to iforgot.apple.com. Then you can unlock your account with your existing password or reset your password. After multiple unsuccessful attempts to unlock your account, your Apple ID will remain locked and you can try again the next day.
Published Date: July 08, 2020

So he knows the password (as mail gives access). If you're unsure how the password is spelled use keychain access on the mac to unlock the spelling.

Take this password to iforgot, which unlocks the account using the password and other questions about your account which will allow you to change the security questions and add 2FA, what am I missing?
Iforgot says : this account is locked and starts to do its thing, see very first post.
 

Henk van Ess

macrumors demi-god
Original poster
Aug 20, 2008
314
241
Amsterdam
True. However, you could have and should have turned it on when it became available and you wouldn’t be in this mess.

We all make mistakes at times. This is a hard lesson learned. Hopefully, this thread will help others from making the same mistake.

 
Last edited:

Henk van Ess

macrumors demi-god
Original poster
Aug 20, 2008
314
241
Amsterdam
  • Like
Reactions: McScooby

Henk van Ess

macrumors demi-god
Original poster
Aug 20, 2008
314
241
Amsterdam
So I think the interesting question that comes from this thread, and is rising above my own interests, is, why does Apple allow access to mail on a locked account?

I do think it's either total lockout or no lockout. Having a partial lock on an account feels silly from a security point of view. Why does Apple allow me to access my mail on MBP16 but not on M1? From a security point of view, the mBp16 account should also have been disabled... Sure, it's good that we have this thread to warn others, but it doesn't feel that Apple covered all bases here.. So all of you who send me friendly advice about password managers, 2FA, etcetera, isn't the point that you either lock someone out or not, not half. If I would have been a hacker, I still can send and read mail. That shouldn't be possible. If somebody stole my data, I would feel vulnerable because Apple allows this. (Yes, I do want access back, but just making a point here about security logic)
 

Apple_Robert

Contributor
Sep 21, 2012
35,672
52,515
In a van down by the river
I do think it's either total lock out or no lock out. Having a partial lock on an account feels silly. Also from a security point of view. Why does Apple allow me to access my mail on MBP16 but not on M1? From security point of view, the mBp16 account should also have been disabled... Sure, it's good that we have this thread to warn others, but it doesn't feel that Apple covered all bases here.. So all of you who send me friendly advise about password managers, 2FA etcetera, sure, but the point is: either you lock someone out or not, not half. That's silly, also from a security point of view: battling hackers. If I would have been a hacker, I still can send and read mail. That shouldn't be possible. If somebody stole my data, I would feel vulnerable because Apple allows this. (Yes, I do want access back, but just making a point here about security logic)
You have missed the point. On your 16”, you are rightfully signed in as far as Apple’s protocol system is concerned. Your account is locked against any further access on other devices not already signed in. And even though you called Apple, there is no way for them to know that they were talking to the authorized account holder because you couldn’t pass the security protocol. They can’t rightfully turn off all access when they can’t determine 100% via a phone call or web access your account identity. If they did that, they could get sued.

Apple’s security system makes sense and is being used correctly in your situation.

There really isn’t much point in arguing over what is with your account. The best you can do is get mail sent to a new address so you don’t miss billing and other important contact.
 

Henk van Ess

macrumors demi-god
Original poster
Aug 20, 2008
314
241
Amsterdam
You have missed the point. On your 16”, you are rightfully signed in as far as Apple’s protocol system is concerned. Your account is locked against any further access on other devices not already signed in. And even though you called Apple, there is no way for them to know that they were talking to the authorized account holder because you couldn’t pass the security protocol. They can’t rightfully turn off all access when they can’t determine 100% via a phone call or web access your account identity. If they did that, they could get sued.

Apple’s security system makes sense and is being used correctly in your situation.

There really isn’t much point in arguing over what is with your account. The best you can do is get mail sent to a new address so you don’t miss billing and other important contact.

We do have one little twist here @Apple_Robert : the motherboard of my MBP 16 was replaced two weeks ago and I restored via migration assistant. See my next posting here:https://forums.macrumors.com/threads/apple-locked-me-out-and-says-thats-it.2271904/post-29316894
 

Henk van Ess

macrumors demi-god
Original poster
Aug 20, 2008
314
241
Amsterdam
We do have one little twist here: the motherboard of my MBP 16 was replaced two weeks ago and I restored via migration assistant.

1. My ****@me.com ICLOUD account is locked since months, but i didn't care because I only use it for EMAIL since 1990, never upgraded or used it for ICLOUD
2. My M1 arrived and I needed access to ****@me.com but failed because account was blocked. I had to do the things from very first posting in this thread.
3. But technically, my MBP16 should been treated as my M1 after a replacement of motherboard
4. I used Migration Assistant on MBP16 two weeks ago and got access to mail of ****@me.com
5. I didn't use Migration Assistant on M1 and will try now to see if I get access back to mail on M1
 
Last edited:

Henk van Ess

macrumors demi-god
Original poster
Aug 20, 2008
314
241
Amsterdam
And when I think longer about this (I do ;)) - maybe the problem is even deeper. I got the ****@me.com in 1989/1990 or so and never used it as part of iCloud verification on none of my devices, but only as e-mail.
 

planteater

Cancelled
Feb 11, 2020
892
1,681
Again, we have an example of how poorly Apple is handling ownership of Apple ID's.

Apple ID's are not just a disposable entity that one should only provide proof of ownership by a series of simple questions and responses.

With each new service Apple creates, the data tied to these ID's becomes increasingly important and personal. In order for Apple to maintain trust, it must provide a mechanism for proving ownership by tying them to one’s real identity, as do financial institutions to maintain a relationship to one’s accounts. When will Apple start taking Apple ID ownership seriously?
 
  • Like
Reactions: Henk van Ess

Henk van Ess

macrumors demi-god
Original poster
Aug 20, 2008
314
241
Amsterdam
To @Apple_Robert and others. It worked.


I have ****@me.com now running on M1 after using migration assistant
I do feel that I am at risk loosing the account, but via restore that fear went away. Should I still be worried? I really don't need ****@me.com as iCloud verification, just for mail
 
Last edited:

Henk van Ess

macrumors demi-god
Original poster
Aug 20, 2008
314
241
Amsterdam
Again, we have an example of how poorly Apple is handling ownership of Apple ID's.

Apple ID's are not just a disposable entity that one should only provide proof of ownership by a series of simple questions and responses.

With each new service Apple creates, the data tied to these ID's becomes increasingly important and personal. In order for Apple to maintain trust, it must provide a mechanism for proving ownership by tying them to one’s real identity, as do financial institutions to maintain a relationship to one’s accounts. When will Apple start taking Apple ID ownership seriously?
I love your response! This it what I do agree with totally. I am very interested in "Again, we have an example of how poorly Apple is handling ownership of Apple ID's." - where are these other examples? I WILL use them in court :)
 

Henk van Ess

macrumors demi-god
Original poster
Aug 20, 2008
314
241
Amsterdam
No you do not HAVE IT. You repeatedly tried to guess the password on your new Mac and failed. Your old Mac is currently logged in, and that's different.

I'm really sorry, and I sympathize with you, but the truth is you don't have neither the correct password nor the correct security questions (it doesn't matter if you have 99% of it or 5% of it), that's how you arrived to this situation.

If I were you, I would set some kind of forwarding email from the account you are soon to lose access to. In the old Mac, I mean. That way you won't loose access to the emails sent to that account.

No you do not HAVE IT. You repeatedly tried to guess the password on your new Mac and failed. Your old Mac is currently logged in, and that's different.

Hold your horses here, there is no guesswork involved. I know the password, and I only get the Account Locked warning after entering correct password. If I type in a random password, it doesn't give me that. Just look carefully at screenshots of first posting. The same events happen when I go to Iforgot. So if I type a nonsensical password, it won't work like that
 

planteater

Cancelled
Feb 11, 2020
892
1,681
I love your response! This it what I do agree with totally. I am very interested in "Again, we have an example of how poorly Apple is handling ownership of Apple ID's." - where are these other examples? I WILL use them in court :)
I apologize, but I don't have examples to point out. I just recall reading on this forum more than once how people have struggled providing proof of ownership. I think of myself and how important the data that I store within my ID is and what it would mean to lose it. I shudder to think of not being able to get back into it. Although that would be unlikely as I've taken steps to record and back up my credentials, I still would rather have a relationship by my true identity.
 
  • Like
Reactions: Henk van Ess

ian87w

macrumors G3
Feb 22, 2020
8,704
12,638
Indonesia
To @Apple_Robert and others. It worked.


I have ****@me.com now running on M1 after using migration assistant
I do feel that I am at risk loosing the account, but via restore that fear went away. Should I still be worried? I really don't need ****@me.com as iCloud verification, just for mail
Oh it worked? Great! I would start setting up 2FA to avoid further issues.
Even if you only use it for email, your Apple ID is an important way to verify ownership of Apple devices.
 

Henk van Ess

macrumors demi-god
Original poster
Aug 20, 2008
314
241
Amsterdam
Oh it worked? Great! I would start setting up 2FA to avoid further issues.
Even if you only use it for email, your Apple ID is an important way to verify ownership of Apple devices.
I can't activate , even now. It must have something to do with that I never upgraded /used the ***@me.com since 1989/1990, the birth of that account, for device identification but I only used it in mail client. I still think Apple should have a rescue plan for users like me, but they seem to have none
 
Last edited:

ian87w

macrumors G3
Feb 22, 2020
8,704
12,638
Indonesia
I apologize, but I don't have examples to point out. I just recall reading on this forum more than once how people have struggled providing proof of ownership. I think of myself and how important the data that I store within my ID is and what it would mean to lose it. I shudder to think of not being able to get back into it. Although that would be unlikely as I've taken steps to record and back up my credentials, I still would rather have a relationship by my true identity.
I think it's due to privacy. Once you link an ID to an Apple account, then it's even higher risk for privacy breaches or law enforcement requests. It's a trade off I think, and Apple will be highly liable if something happens.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.