MacBook Pro 16-inch logs show prior use despite being factory-sealed

Bought a "factory-sealed" MacBook Pro 16" — its own logs show it was powered on once, 64 days before I set it up. Did Apple or the reseller do it?


I bought this MacBook Pro 16" (M5 Pro, 48 GB) as BRAND NEW / SEALED from a local reseller at full new price. Box looked factory-sealed, nothing inside looked disturbed. I set it up on Aug 30, 2026. Then I checked the logs. I need expert opinions on what happened before me.


THE MACHINE (all verified on the unit itself)

- MacBook Pro 16", Apple M5 Pro (18-core), 48 GB, model identifier Mac17,8

- Order code: MGE64LL/A (US-market configuration)

- Serial:***

- Battery serial: *** - 3 charge cycles, 100% health (rated 1000 cycles)

- Charger as shipped: genuine Apple 140W USB-C (serial ***)

- Shipped on macOS 26.5.1 (factory image mastered May 21, 2026), now on 26.6.2

- No MDM/DEP enrollment (not ex-corporate). Single user account. No wipe/reinstall markers - log history runs unbroken from the very first boot to today.


THE 6-MINUTE SESSION ON JUNE 27, 2026

(Note: timestamps are in -07 because the machine was still on its factory-default Pacific clock - region was never chosen. So -07 does not prove physical location.)


- 09:29:26 -07 - first line ever written in /var/log/install.log. The boot ledger starts 4 seconds earlier: "wtmp begins Sat Jun 27 22:29:22 +06 2026" (that line renders in my local timezone; same moment).

- 09:29:33 -07 - the Hello screen (Language Chooser) starts. Wi-Fi scan finds NO networks.

- 09:31:12 -07 - "User input detected: Mac plugged in, cancelling shutdown timer" - someone connected the charger mid-session. ZERO keyboard/trackpad input was ever recorded in this session.

- 09:31:44 -07 - GarageBand / MAContent asset packs auto-staging (normal offline first-boot staging from the factory image; no Apple ID, no network).

- 09:34:59 -07 - the Mac restarts itself once (normal first-boot behavior; second BOOT_TIME recorded in hardware: 1782578099).

- 09:35:15 -07 - last activity ever. No shutdown record = force-powered-off (power button held).


Total uptime: 5 minutes 53 seconds across two boots. No login, no account, no language ever selected.


THEN 64 DAYS OF NOTHING

- /var/log/install.log contains exactly three dates: 2026-06-27, 2026-08-30, 2026-08-31. The last June 27 line (line 3366) is followed immediately by Aug 30 (line 3367).

- The boot ledger (last/wtmp) shows zero events between June 27 and Aug 30. No boots, no logins, nothing.


AUGUST 30, 2026 - ME, FOR THE FIRST TIME EVER

- 19:23:13 (+06, my local time) - "hello started"

- 19:23:18 - "User input detected: mouse moved" - the first human touch ever recorded on this Mac (mine)

- 19:24-19:27 - Setup Assistant runs (_mbsetupuser session); /var/db/.AppleSetupDone created 19:27:57

- No other username has ever logged in (deleted accounts would still appear in the boot ledger - none do).


APPLE'S OWN RECORD

- checkcoverage.apple.com shows warranty until Aug 29, 2027 - anchored to MY purchase date. So Apple's servers have no earlier activation, consistent with the June session never connecting to any Wi-Fi.


MY QUESTIONS

1. Does Apple's factory QC ever boot a finished retail unit to the customer Hello screen ~5 weeks AFTER the factory image was mastered (May 21 -> June 27), and then force it off? Or does a truly factory-sealed Mac's install.log begin with the customer's own first boot?


2. If not Apple: is "charger plugged in, no input, forced off after 6 minutes" consistent with an importer/reseller bench test - i.e., a US unit opened, tested, re-packed and re-sealed before export?


3. Is there ANY way to tell where the June 27 boot happened, given the machine was on factory-default clock and never touched a network?


4. Anything else I can check locally to narrow down who did it?


TL;DR: Sold as sealed new. The Mac's own logs prove it was opened and powered on once - 6 minutes, Hello screen only, charger plugged in, forced off - 64 days before my setup. Battery at 3 cycles, no prior accounts, no wipe, Apple warranty starts with me. Apple factory QC, or the seller's chain? If you work in Mac repair, retail, or QC, I'd genuinely value your read. Happy to paste more log lines on request.


[Edited by Moderator]

MacBook Pro 16″

Posted on Sep 1, 2026 5:54 AM

Reply
Question marked as Top-ranking reply

Posted on Sep 2, 2026 8:35 AM

31 replies

Sep 1, 2026 8:14 AM in response to rakibulhasanrana

rakibulhasanrana wrote:
Bought a "factory-sealed" MacBook Pro 16" — its own logs show it was powered on once, 64 days before I set it up. Did Apple or the reseller do it?
[...]
MY QUESTIONS
1. Does Apple's factory QC ever boot a finished retail unit to the customer Hello screen ~5 weeks AFTER the factory image was mastered (May 21 -> June 27), and then force it off? Or does a truly factory-sealed Mac's install.log begin with the customer's own first boot?

Yes. it is only logical to conclude that some percentage of factory fresh Macs get booted at the end of production and before they are sealed and shipped. That would be a common practice for QC purposes to ensure that assembly errors don't affect high numbers of units.


2. If not Apple: is "charger plugged in, no input, forced off after 6 minutes" consistent with an importer/reseller bench test - i.e., a US unit opened, tested, re-packed and re-sealed before export?

No. Since these Macs are sealed at the factory it would not be consistent with any sort of importer/reseller bench testing. "Charger plugged in, no input, forced off..." would be consistent with manufacturing and the QA process.


3. Is there ANY way to tell where the June 27 boot happened, given the machine was on factory-default clock and never touched a network?
4. Anything else I can check locally to narrow down who did it?

Nope, and nope.



I'm in agreement with the conclusion of our friend, @Grant Bennet-Alder; you are in possession of a new, previously unused, authentic Apple MacBook Pro. Apple's own record shows your purchase and their registration of the warranty to you. I see no reason to suspect shenanigans.

Sep 1, 2026 6:14 AM in response to rakibulhasanrana

1 - We are users like you. We have no way to know how Apple QC handles finished products. Speculation would not be an answer and in any event is not allowed here.

2 - No reseller/importer should *ever* open a factory sealed unit. That would void the whole purpose of factory sealing.

3 - No

4 - No


If you have any doubts about this unit, return it immediately and get a refund. There is no sense taking chances with unknowns.


It is completely possible to open the box and then reseal it to make it look "factory sealed."

Sep 1, 2026 7:37 AM in response to rakibulhasanrana

Three charge cycles is VERY typical, but higher numbers in the single digits are occasionally seen, on computers that are unmistakably NEW. That is like getting a new car with less than 100 miles on it. It's still new, they just tested it to be sure it was working properly.


Your report of the log contents suggests that no one ever used this Mac for anything. No setup was done, leaving you with the "hello in twenty languages" screen at power-up. No keyboard or trackpad input, No User account was created. No Apple-ID was entered.


The date&time could have been wrong initially , so you can't count on that being right. An automatic connection to a date server via Wi-Fi could have fixed that, and thrown what appears to be a huge calendar GAP into the log. The entire log COULD have taken place in a much shorter calendar time.


I think you are reading out the last step in the manufacturing process, checking to see whether This Mac will power up and work properly. This is done to assure that you get the best results possible, and there are no latent defects.


-----


Suppose instead that someone has deliberately opened this computer and powered it up at the dealer.

If that were the case, they never did anything with it, it does not show signs of being a demonstrator or floor model.


Summary: you have your warranty staring at the moment of sale to YOU. [in my opinion] that is the first sale and first non-factory use of the computer, and it is, in fact NEW.



Sep 1, 2026 3:39 PM in response to rakibulhasanrana

Several posters here have mentioned "gray market seller" but is this an Apple Authorized Seller or instead a "gray market" seller? If it was sold by a seller acting as an agent of Apple, I think you are fine. You may still be fine, but checking the warranty might be something worthwhile:


Allan Jones wrote:


Can you confirm the warranty date using this method?:


View Coverage - AppleCare & Warranty


Do they even have Apple Stores in the location you are at? Maybe a gray market seller is the best one can do in some parts of the world.


I just purchased and set up a new Macbook Pro M4 Pro for my daughter's business in January 2026 but it was bought at an Apple Store and I did not think to check that log file. By now it is long overwritten I am sure. That said, I recall checking that several years ago on a new Mac my employer got me (from Apple directly) for work. When I checked that (it was several years ago so I can't provide an image or anything like that) I recall seeing that it had a very short power up similar to what you describe (I assumed it was at the factory for final testing) with one or at most a few battery cycles, then nothing for a few months until there was a longer "session" that was from my employer configuring it as an MDM machine, maybe about an hour. And then ... nothing until it arrived in my office.


If I were in your shoes, I would accept this as a new Mac. You do want to be sure as these are expensive! But it sounds like it is brand new.


My only concern is the state of your warranty. If obtained from an Apple Authorized Seller, I would think you should be fine, but you can check that at View Coverage - AppleCare & Warranty

Sep 1, 2026 10:14 AM in response to rakibulhasanrana

Thank you for the log info.


A quick “startup / shutdown” as part of normal factory production sampling makes VERY good sense.


I too am part of the general consensus that you do indeed have a “new” factory sealed unit.


The thought of obtaining a warranty repair on a gray market device does give me some pause, but I have no basis to be able to judge it either “pro” or “con” for the practices in your particular locale.


(I was very thankful for my own Apple “zero-pushback” full warranty coverage of 2x otherwise very pricy repairs on my older Intel MBP)



Sep 2, 2026 10:57 AM in response to Chattanoogan

Chattanoogan wrote:
Re: “… Several posters here have mentioned "gray market seller" but is this an Apple Authorized Seller or instead a "gray market" seller? …”
It was mentioned because the OP specifically answered in his initial post and 1st reply it was “U.S. Spec” Hardware … sold outside the U.S. … by a “Not Apple Authorized” reseller.

Chattanoogan, thanks for pointing that out, I tried to read everything carefully but must have missed that.


Ok, if that is the case, then this Mac was purchased by someone else and was sold to the current owner, officially that makes it a used or pre-owned Mac even if the first owner never turned it on.


That said, it looks like the present owner has the warranty based on other images posted by the OP. So that's good. The warranty stays with the serial number so it transfers to new owners when a Mac is sold or transferred.


Personal preference -- I would never purchase something as expensive as a MacBook Pro from a not Apple authorized reseller, unless I was in a location where there is no other way. Will the laptop have to mailed off to some distant place if it ever needs warranty service? Again, maybe there was no other way.


The information posted by the OP seems to indicate that this Mac was not powered on or used by the first purchaser; it appears to have been directly resold to the current owner. So that's good also.


By the way, all the emphasis on "factory sealing," it is not hard for third parties to replicate that nowadays.


Sep 1, 2026 7:51 AM in response to Chattanoogan

Fair callout — you're right, and it's a fair question. I kept answering with what the seller TOLD me (USA market, brand new, never activated, sealed box, silver, 48GB/1TB) instead of describing the physical box. I'm not a technical person and didn't realize how much the seal type mattered. Straight answers:


- How the box opened: I pulled two tear strips under the lid

- Inside: charger and cables untouched in original film, laptop covers intact






[Edited by Moderator]

Sep 1, 2026 6:55 AM in response to rakibulhasanrana

Thank you for answering, your images of the broken seals appear nearly identical to my own M5 MBP.


As has been pointed out, these seals could still have be counterfeited.


(If you had answered Factory Shrink Wrap) we’d have known conclusively it had been re-sealed as Apple doesn’t shrink wrap)


So … perhaps others here might chime in with something more substantive about those “first power-up” log entries you’re seeing.


Perhaps it’s all perfectly normal. I suspect that few new owners check these sorts of details early-on with a brand new computer.



Sep 1, 2026 8:30 AM in response to Chattanoogan

<< where I might find on my own “newish” MBP the log referenced in the OP ? >>


If more than a day or two has passed since unboxing, those logs are rolled into a temporary directory, before being deleted completely.


Otherwise your Mac would be completely over-run with log files!


I do not know specifically.

I would launch Console and look as far back in System Log as was available. (on my Mac at this writing, that's TODAY, just after midnight.


if I select system log and choose "Reveal in Finder' it shows I am reading from:

/private/var/log/system.log


where there are also older files named :

system.log.0.gz


... through .6.gz at this writing


double-clicking one of those simply unpacks it to Downloads folder.

double-clicking on the unpacked "download" gives me "no Application to open..."

I can choose to open with Console, and there it is in a new window.

My oldest opens at 25 August with BOOT_TIME entry (Date 'at this writing' is September 1)



MacBook Pro 16-inch logs show prior use despite being factory-sealed

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.