Apple ID Constanly Getting Locked

Yeah, I suspect some bot somewhere is grinding out apple-ID probes by random permutation of letters.

It amounts to a denial-of-service attack on our accounts and makes people use easily remembered (and easily cracked) passwords and security questions to be able to get access again.

The more often Apple locks our accounts, the less likely we are to use tough passwords, eh Apple?

Think of a different way.

Apple has never been comfortable with requiring users to send a verification when logging on a new computer or device. Instead they just lock your account and ask you to reset it.

They are behind the times when it comes to security surrounding password resets.

The problem is. If someone does not like you and they know your apple ID .. all they have to do is try to log in with your ID several times and then you can be locked out. It's a denial of service attack, but Apple hasn't acknowledged it yet.

Sorry this is happening to you, but it happens to most people who have a common name like lynn@icloud.com or bob@me.com. People will think it's their ID and try to use it. Google, Amazon, and others have ways to manage this. As previously stated Apple just locks everyone out of the house because someone rang the doorbell 3 times.

I'm having this same problem and when I have an appleTV, two iPads, MacBook, and iPhone it's quite frustrating having to unlock for an issue that really is unrelated to a security breach: ala: someone rang doorbell three times.

I've got a common name and have had my email address since .mac — so I not only get locked out, I get a ton of email intended for others; often this includes serial numbers for software, personal photos and sensitive attachments such as financials as xls files.

I delete such things, but there's got to be a solution for my almost daily lockouts of my iCloud account. I'm at my wits end!

So if your name is bob@me.com you also have bob@icloud.com. I'm to the point where I'm going to have to make a different Apple ID. I get emails on an almost daily basis to my @icloud name …

By the way, changing your AppleID is NOT a solution as I discovered this on the Apple support site for AppleID:

If your email address ends with @icloud.com, @me.com, or @mac.com, you can't change your Apple ID and you won't see Change Email Address on your account page.

So I'm screwed and so is Haxley, if you have an apple ID as iCloud, Me, or Mac as I do and sounds like you do.

Starting over with new ID would mean losing all of your purchases etc.

Crazy and yet real.

I have filed it as an official bug to Apple as I am a developer. It has not been marked as a duplicate, so I guess people don't report it, which makes it stay unfixed.

Bug# 24129504

Anything I can do to put pressure on this getting solved. I am having to reset multiple times a day. I am a very come name. Thanks.

I have called support about it. Turned off two factor authentication for some days. Turned it back on - and a different and easier way to use it became how it works. No longer need for a recovery key each time I need to unlock my account.

It is better now but not solved.

It is a security issue so I believe they need to solve it as evil doers can do a denial of service attack by constantly blocking users accounts.

So if your name is bob@me.com you also have bob@icloud.com. I'm to the point where I'm going to have to make a different Apple ID. I get emails on an almost daily basis to my @icloud name …

By the way, changing your AppleID is NOT a solution as I discovered this on the Apple support site for AppleID:

If your email address ends with @icloud.com, @me.com, or @mac.com, you can't change your Apple ID and you won't see Change Email Address on your account page.

So I'm screwed and so is Haxley, if you have an apple ID as iCloud, Me, or Mac as I do and sounds like you do.

Starting over with new ID would mean losing all of your purchases etc.

Henrik Dalgaard wrote:

It is a security issue so I believe they need to solve it as evil doers can do a denial of service attack by constantly blocking users accounts.

This is very true, though that would extend beyond just those of us with simple and desirable iCloud/Mac/Me addresses.

Onward. I should get more info next week after the 1st.

It makes me want to get rid of any apple product requiring an Apple ID. More than once per month make Apple the problem, not the user who has signed in properly the day before.