Want to highlight a helpful answer? Upvote!

Did someone help you, or did an answer or User Tip resolve your issue? Upvote by selecting the upvote arrow. Your feedback helps others! Learn more about when to upvote >

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Multiple e-mails about resetting my Apple ID - hacking?

Hi All,


Over the past 2 weeks I've had 5 separate e-mails giving me details about how to reset my Apple ID.


At the bottom of each e-mail it says,


"If you weren't trying to reset your password, don't worry – your account is still secure and no one has been given access to it. Most likely, someone just mistyped their email address while trying to reset their own password."


It seems like someone is requesting a link to reset my Apple ID. And doing so on a regular basis.


Should I worried about this? Is it an attempt to hack my account?


Many Thanks

Posted on Jun 21, 2013 2:49 AM

Reply
78 replies

Jun 21, 2013 3:05 AM in response to Robbie_DB

A lot of people have complained of this. It seems unlikely that this has come from Apple given the constant repeats, and may well be a phishing attempt. In any case do not click on any links in it.


If you feel you need to reset your password, go directly to http://appleid.apple.com . Remember you will need to sign out and in again on all your devices and services which use it.


The long header of the message may indicate whether or not it actually came from Apple. It would be useful to have it posted here, but if you do so, remove your email address from it first. To view the long header, open the message and hit command-shift-h.

Jun 21, 2013 3:14 AM in response to Roger Wilmut1

Hi Roger,


Thanks for the reply. Well, the messages have all looked pretty genuine to me. I did suspect phishing. But I post the header of one of the messages here for you to look at (I replaced the e-mail address I received this at with xxxxxxx),


x-store-info:J++/JTCzmObr++wNraA4Pa4f5Xd6uensWQjutc4PB1AhsilHonqnf9e+7qB/K/hFRUa WZSQXRoCTQqXTJ7lb167EGUl1dSKztlmdxGjVtpNyIstfD+6kpL1r/ur38Y5mY7dwElfCXV4=

Authentication-Results: hotmail.com; spf=pass (sender IP is 17.151.1.53; identity alignment result is pass and alignment mode is relaxed) smtp.mailfrom=appleid@id.apple.com; dkim=pass (identity alignment result is pass and alignment mode is relaxed) header.d=id.apple.com; x-hmca=pass header.id=appleid@id.apple.com

X-SID-PRA: appleid@id.apple.com

X-AUTH-Result: PASS

X-SID-Result: PASS

X-Message-Status: n:n

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0xO0Q9MTtHRD0xO1NDTD0w

X-Message-Info: NhFq/7gR1vSKhFmi4WwI4Kh+Jze51X5wgInS0JduvrOdSaFTCph9nVA6i4NSGGdPKTQrKHWmmRjxuPh W+yb65g0nWJ5Pv3v3U0Y16wRI3GF7ic88vkBs5FHMIHRvUNo0ssXxUuYlEImyjTvgUNEr903mBNzDumR 96fhCpSDKKTk=

Received: from nwk-txn-msbadger0303.apple.com ([17.151.1.53]) by SNT0-MC1-F47.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);

Thu, 20 Jun 2013 12:22:13 -0700

DKIM-Signature: v=1; a=rsa-sha1; d=id.apple.com; s=id2048; c=relaxed/simple;

q=dns/txt; i=@id.apple.com; t=1371756132;

h=From:Subject:Date:To:MIME-Version:Content-Type;

bh=qoDntm+JdBvONVFfyPZb2iBa2dU=;

b=oVp2WJEnwrPO0oSDr0+xfKFwHui/xIm8ipIiTgwz+Yjrtxh3BHDmNWibOy7nhu86

Ym02BBPcFZwjJ16QsRKWubTU0tUPXp1x6Tb39qGElvbN9LwFXNd11G3aEfKlat+J

zJ0igHSKtKtpMLXsnatshAJZNynxlhlpVpJfYGCbhJ3JVnbEJej5B6ZewyivQ0II

KXXUdyH9a/SunaxnMLeG54CR0MbAP2cDnxJnKQWE36LdZZ35PLBDa1ga2BK+VEdb

3lCG8XJLEfeFWRWBzzm6us07+ZtugQtBCma+wlUtozfunLU1QE4sn0+RJyeZIvqy

pfuSnbLvbZNPoUcs/VkOYQ==;

Date: Thu, 20 Jun 2013 19:22:12 +0000 (GMT)

From: Apple <appleid@id.apple.com>

Reply-To: do_not_reply@apple.com

To: xxxxxxxxxx

Message-ID: <226562172.23780691371756132580.JavaMail.roverp@nwk-roverp-lap18.corp.apple.com>

Subject: How to reset your Apple ID password.

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_Part_1188870_1079653711.1371756132579"

X-EmailType-Id: 754000

X-Sent-To: xxxxxxxxx,2,k%2BmjWPCFEH1m5ry2zndhAmumlP8MsmMaHe88qBcDnaPdpSUceY3G8Djxz9L1r6zoB 4HegNyyOPjbx9zID3YEggObuZpSmV2CkZWjESqBHrXLjl2G02R8iCtAjtOxvPHqKDsDoHsju279MsU%2 Ff4WVTH3LP6nfHzf3zGvykU1pJ7M7eDsoSMm2UMknvlH9t8MtJ8Xv6dntb61x4BPv27kXYlSMiMYTG9o 6gCACdJc3QNcnG46qm8Dv8BznNl%2FMrGML%2F7ZFE4a2emYbfEV1ALKJ7Ay9%2B7O9of1urER0Xx6AT KpgUJAtGRG705NgQOobqy2DSiY746i04hJyHJbrrWZdTQ%3D%3D

X-Attach-Flag: N

X-Business-Group: DS

X-DKIM_SIGN_REQUIRED: YES

Return-Path: appleid@id.apple.com

X-OriginalArrivalTime: 20 Jun 2013 19:22:13.0141 (UTC) FILETIME=[77966450:01CE6DEB]

Jun 21, 2013 3:28 AM in response to Robbie_DB

Yes, it does appear to be genuine. Why so many people are receiving this, and repeatedly, is not clear. It may indeed by that there are repeated attempts being made to access people's accounts illicitly which is then triggering these emails automatically.


As long as your password is a solid one - not a dictionary word, and it should be at least 8 characters long (12 is better) and contain at least one upper case character and one numeral) - you can probably just ignore it.

Jul 12, 2013 1:47 PM in response to Robbie_DB

I received several messages of this type this morning. After a considerable amount of research, I still don't know what to do.



The emails were addressed to my Apple ID Recovery email address, which definitely made me wonder if my account had been compromised. (I set up two-step verification when it first came out.)


Although the emails seemed to have come what appeared to be a genuine Apple email address, and the links took me to what appeared to be a legitimate, secure Apple website, the whole thing did not seem right.


I spent a half-hour on the phone with Apple service regarding the issue but did not get any definitive answers. Are the emails legitimate? What caused this? Was my account secure? Did something happen that triggered a bulk email being sent out?


The best the tech could offer was to change the password on the AOL email account that is my email recovery address.



I have not made any changes to or inquiries regarding my Apple account/ID/password since I set up two-step verification when it first came out. So far, I have not noticed any unauthorized activity on my account.


I haven't found any clear answers on Mac sites; does anyone have further information? So far, I do not feel reassured. I'd prefer not to reset my Apple ID password as I have a number of devices.


Thanks, everyone.

Jul 12, 2013 3:46 PM in response to Robbie_DB

I'm an iTunes user only, and have been getting hit with "iForgot" emails from Apple for a couple weeks now. About 1 to 2 emails every couple days.


The first time it happened, I also suspected a phishing attempt. But the links in the email all seemed genuine and the email header looked almost identical to the one posted here. Still, rather than risk it, I signed into iTunes and did a reset from within the app, changing my password to something completely new.


Within a couple days, I got the same email, and it's repeating still. My password is fine (obviously, since I was able to sign into the community forums), yet I still keep getting the reset password emails.


This is very concerning, as my credit card information and purchasing rights for music are tied into my iTunes account and controlled by this password. I can't find any official comment from Apple about this, weither it's a glitch in their system, or a hacking attempt or what. I'd like the emails to stop, but I'd like to know what's going on too.

Jul 15, 2013 4:05 AM in response to Robbie_DB

I'm glad I'm not the only one having this problem. It's freaking me out! Started 2 weeks ago and happens now almost daily.


I also get prompted for my password continuously when I'm using an app or just trying to look at photos etc. I click 'ignore' or 'cancel' and it goes away, but I'm worried some scammer is lurking there waiting for me to do something that will trigger IPad Armageddon.


I'm checking my bank account every whip stitch in case 'the spooks' have managed to hack into it and rack up fraudulent purchases at my expense.


Can't Apple do something about this? Please??

Jul 19, 2013 8:20 PM in response to Robbie_DB

I just started getting these emails today also and found it odd. Then found it even more odd that so many people are having this same issue and Apple has not made one comment (that I could find) on it, at the very least to say they will be looking into the problem.


Is it possible that it may have something to do with in-app purchases over a certain dollar amount? I recently made one over my usual .99 cent purchases, and the next day the emails started rolling in. All unrequested. Anyone else have this coincidence? Maybe app makers are selling apple IDs to phish?

Jul 22, 2013 4:23 AM in response to Robbie_DB

I'm still getting this at least a couple times a week, and unforutnately it's sometimes followed up with a genuine "Your Apple ID password has been reset" email, forcing me to go in and change my password (which is a random set of numbers and letters). I don't click any links in the email, but instead go to the Apple website where, sure enough, my password is no longer mine.


What's going on with this? This is a pretty big security problem.

Jul 22, 2013 1:52 PM in response to Robbie_DB

I received these emails too, but not on the primary emailaddress connected to my appleid. I don't remember ever receiving mail from my appleid on this emailaddress. Also normally the email is not in English but in my local language. That's why I have some doubts that it's real.


However, it had my name correct, I think, I already deleted the emails. Still a bit worried and changed my email password to something more complicated to be sure.

Jul 22, 2013 4:01 PM in response to Robbie_DB

I was constantly being prompted by my password before I started getting the unsolicted password resets so I don't know if that's related.


I just enabled 2-step verification so we'll see if those emails stop. I assume my phone is going to blow up with verification codes so I'll know when someone was trying to get into my account but I'll be able to ignore it because they won't have my phone/recovery key. Really didn't want to have to input a code to buy a 0.99 cent song but I guess I don't have a choice.

Jul 22, 2013 4:51 PM in response to Robbie_DB

Been getting this for the last few days. About 3 hours between e-mails.

First few times, I didn't think much of it. Checked my account, and no activity.

This is definitely a problem.

I would suggest a maximum of a certain amount of these requests, in a 72 hour period.
Say a maximum of 5.
That way Apple can start figuring out which ones may be compromised, and which ones are safe. At the very least, that might help.

Jul 22, 2013 5:23 PM in response to Robbie_DB

I too have been receiving these emails for the past 3 weeks now. But it has gone further where my password has been changed a few times now. And when I notice, is when I use either my iPad or my iPhone (which prompts me to add my password over and over when connecting to iCloud or iTunes) - similar to R-Stac and Welshgirlinsurrey. the last 2 times, my password has been changed and I don't even receive an email from Apple anymore. What is going on with Apples security? I can't even switch to two step verification since it's not available in Canada yet. Is Apple doing anything about this because constantly having to change my password once or twice a week is getting really tiring.

Multiple e-mails about resetting my Apple ID - hacking?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.