Apple id password Hack

Question

Level 1

8 points

Apple id password Hack

I am asking on behalf of my girlfriend, we think her sister tried to log in into her account. Someone changed the password on her apple id and her hotmail email account... I have since changed the passwords and security questions. (we think her sister knew her answers to her security questions). On her hotmail account it showed each time that person tried to log in and it listed time and date, even said when they reset password,

(basically showed history of all log in activity) Once they changed the hotmail password and had access to her account, they clicked forgot password for apple id and apple sent an emailed showing how to reset the apple id password, so since that person had access to her email it was easy for them to create a new password for her apple id... So i have since changed all security questions and even misspelled the answers on purpose so it should be extremely difficult to guess the answers now. So my question is, is there a way to view the history of all log in activity for the apple id (like the hotmail account showed)? and is there anymore steps i could do to prevent this in the future?

iPhone 5c, iOS 7.1.2

Posted on Aug 3, 2014 12:51 PM

Reply

Answer 1

FoxFifth

Level 10

468,753 points

Aug 3, 2014 12:56 PM in response to Saintsfan40

Two-step verification is something I use on both my Apple ID and also on my Gmail account. It originally takes a very little time to understand but once it is set up works very well and is not something that is obtrusive or painful to use. Frequently asked questions about two-step verification for Apple ID

It is also something Microsoft offers for their accounts and mail.

Reply

Answer 2

Adan@IT

Level 1

0 points

Aug 3, 2014 12:58 PM in response to Saintsfan40

play around with the console, you can set filters with 'new system log query' . go to 'file>>new system log query>>set your filter and hit go, GL!

Reply

Answer 3

thomas_r.

Level 7

31,989 points

Aug 3, 2014 1:35 PM in response to Saintsfan40

I don't believe there's any way to see a log of when someone has logged on to an Apple ID, unfortunately. Few online accounts provide this kind of capability. It would be nice if they did. You can submit a request to Apple for this feature (perhaps under the iCloud category), though that's unlikely to have much effect unless lots of other people also submit the same request.

http://www.apple.com/feedback/

As for how to handle this, it sounds like you've done pretty well. Note that I usually recommend using completely nonsensical security question answers (eg, "What was your first job?" "bagels and lox"), or even better, completely random answers (afd$ZE8XPp26eRFT). Log them to an encrypted file somewhere so you don't forget. Don't use the same answers on different online accounts. Same with passwords... pick different ones for different accounts!

Also, FoxFifth has given some very good advice about using two-step verification. This doesn't make it impossible for your Apple ID to get hacked, but it means that it's only possible by brute-forcing the password, which won't happen if you've chosen a good one. Resetting the password will require a code sent to another device (like a cell phone) and a recovery key (assigned when two-factor verification is turned on, and stored securely by you).

Reply

Answer 4

thomas_r.

Level 7

31,989 points

Aug 3, 2014 1:37 PM in response to Adan@IT

Adan@IT wrote:

play around with the console

The Console only deals with logs on the local machine. Those logs do not and cannot contain information about someone remotely logging into an Apple ID from a different device.

Reply

Answer 5

Saintsfan40 Author

Level 1

8 points

Aug 3, 2014 2:14 PM in response to Saintsfan40

thanks everyone

Reply