If Your Used Mac Gets Locked

Buying a used Mac can be dangerous if it isn't properly wiped beforehand. Macs have strong security and anti-theft mechanisms that are designed to deter thieves. Unfortunately, those same mechanisms could work against you if the previous owner didn’t erase or factory reset the Mac properly. Worse yet, some sellers on online marketplaces may do this on purpose and attempt to scam you into paying a “cheap” price for a bricked Mac.

The safest place to purchase a used Mac is in Apple’s Refurbished Products store. These Macs are backed by the same warranties and guarantees as a brand new Mac, and come in factory-perfect condition.

If you must purchase a used Mac outside of the Apple Refurbished store, be sure to inspect it prior to purchase and ensure that it is correctly erased. If you cannot inspect the Mac prior to purchase, don’t buy it.

If you already bought a used Mac and it is showing one of the below screens, see the relevant info for that screen below. Unfortunately, the Mac could be lost or stolen, and belong to someone else.

Contact the original owner and/or the police

If the lock screen shows a message with contact information for the original owner, use that info to contact them, and return the Mac back to them. If someone is trying to sell you a Mac that is locked with contact info, take note of the serial number (usually engraved on the bottom of the Mac), as well as info about the original owner and about the seller. Then, report the situation to the police.

If it isn’t possible to contact the original owner, or if no contact info is provided, check with local law enforcement whether the Mac is marked as lost or stolen. If it isn’t, and if the authorities permit you to do so, remove the lock and use the Mac (if possible) until more info can be found about the original owner, if any.

Types of locks

Activation Lock

Activation Lock is Apple’s primary anti-theft system. When Find My Mac is enabled, Activation Lock binds the Mac to the owner’s Apple ID, and bricks the computer if it is erased without the owner’s consent. You won’t be able to use the Mac until Activation Lock is unlocked or removed. If the previous owner/seller cannot remove Activation Lock or supply the previous password used for the Mac (or in a business case, the MDM Bypass Code), contact the original owner and/or the police (see above).

To remove Activation Lock without the previous owner, you will need Apple’s assistance. If you have proof of purchase that includes the serial number, you can start an Activation Lock support request. Unfortunately, there is no other way to remove Activation Lock in this scenario. (Apple might make an exception if the original owner is deceased and you are a heir; see here and here.)

Firmware Password

A firmware password isn’t necessarily an anti-theft device, but it prevents anyone from booting to macOS Recovery or using special boot keys without the correct password. This password is different than the regular admin password, and it can only be set on Intel-based Macs. (The Apple silicon equivalent of this is the Recovery Password.)

If you run into a firmware password, check if a System Lock PIN is also set: press and hold the power button (or Touch ID) until the Mac powers off, then power it on normally. Connect to Wi-Fi and/or select a language if prompted. If you’re prompted for a System Lock PIN once the Apple logo and progress bar disappear, follow the advice for that scenario.

If a System Lock PIN isn’t set, ask the previous owner to disclose or remove the firmware password. If they cannot do this, you might need Apple’s assistance to remove this lock:

• On an Intel-based Mac with the T2 Security Chip: Restore (not revive) the chip firmware, then reinstall macOS. This erases all data, but Activation Lock may still persist.

• On any other Intel-based Mac: You will need Apple’s assistance. Have the Mac serviced at an Apple Store or Apple Authorized Service Provider. Bring proof of purchase with you.

• On an Intel-based Mac made before 2011: There may be exploits (special methods) available online to clear the firmware password.

System Lock PIN

The System Lock PIN (4-digit or 6-digit) bricks the Mac in similar fashion to Activation Lock. You cannot use the Mac until you enter the correct PIN, or remove it as described below. This PIN can be set in two different ways:

• On an Intel-based Mac, it can be set via Find My Mac, or via MDM by a business. If a firmware password isn’t already set, a new one will be temporarily set using the same PIN.

• On a Mac with Apple silicon, it can only be set via MDM by a business. (Using the Lock option in Find My Mac triggers Activation Lock instead.)

If the previous seller cannot provide the correct PIN, contact the original owner and/or the police (see above).

To remove this lock:

• On a Mac with Apple silicon: Restore (not revive) the firmware. This erases all data, but Activation Lock may still persist.

• On an Intel-based Mac with the T2 Security Chip: Restore (not revive) the chip firmware, then reinstall macOS. This erases all data, but Activation Lock may still persist.

• On any other Mac: You will need Apple’s assistance. Have the Mac serviced at an Apple Store or Apple Authorized Service Provider. Bring proof of purchase with you.

• On an Intel-based Mac made before 2011: There may be exploits available to clear the firmware password and possibly this lock as well.

Recovery Password

A recovery password isn’t exactly an anti-theft device, but it indicates that the Mac was used by a business or other institution. It prevents anyone from booting to macOS Recovery or using other special boot functions without the correct password. This password is different than the regular admin password, and it can only be set on Apple silicon Macs by an MDM (used by schools, businesses or other institutions). (The Intel equivalent of this is the firmware password.)

If you run into a recovery password, check if a System Lock PIN is also set: shut down the Mac, then power it on normally. If you’re prompted for a System Lock PIN, follow the advice for that scenario.

If a System Lock PIN isn’t set, check with the previous owner and the corresponding business (if known) whether the Mac belongs to that business. If it doesn’t belong to the business, you can safely remove this lock. If you don’t know which business the Mac was associated with, check with local law enforcement to see if a police report was filed for that Mac.

To remove the recovery password, restore (not revive) the firmware. This erases all data, but Activation Lock may still persist.