Losing access to your primary Apple ID can bring your digital life to a standstill. If you forget your Apple Account password and misplace your device passcodes, Apple’s stringent encryption protections can permanently lock you out of iCloud Photos, Notes, Keychains, and device backups. To safeguard users against catastrophic account loss, Apple provides the Account Recovery Contact feature.
An Account Recovery Contact is a trusted friend or family member who can verify your identity and generate a one-time six-digit recovery code if you are locked out. Crucially, your recovery contact never gains access to your personal data, messages, or files—they simply serve as an out-of-band identity anchor. In this guide, we explore how Account Recovery Contacts work, the prerequisites, and how to configure them on iOS, iPadOS, and macOS.
How Account Recovery Contacts Work
Apple engineered Account Recovery Contacts using zero-knowledge cryptographic safeguards. Understanding how the process functions provides peace of mind regarding personal privacy:
| Action / Capability | Permitted for Recovery Contact | Privacy Safeguard |
|---|---|---|
| View your photos or files | No | Contacts have zero access to your iCloud data or backups |
| Read your messages or emails | No | End-to-end encryption remains tied to your personal master keys |
| Generate recovery codes | Yes | Only generated upon explicit verbal or in-person request |
| Initiate account takeover | No | The code only works when entered into your own recovery flow |
This capability is particularly essential if you have enabled Advanced Data Protection for iCloud, where Apple no longer holds the master keys to decrypt your cloud backups.
Requirements and Prerequisites
Before designating a trusted individual as your recovery contact, verify the following prerequisites:
- Age: Both you and your chosen contact must be at least 13 years of age.
- Apple Hardware: Your contact must own an active Apple device running iOS 15, iPadOS 15, macOS Monterey, or newer.
- Two-Factor Authentication: Two-factor authentication must be enabled on both Apple IDs.
- Device Passcode: All devices associated with your Apple ID must have a lock screen passcode or password enabled.
How to Add an Account Recovery Contact on iPhone or iPad
You can nominate up to five trusted contacts directly from your iPhone or iPad settings:
- Open the Settings app on your iPhone or iPad.
- Tap your Name banner at the top of the settings menu.
- Select Sign-In & Security.
- Tap Account Recovery.
- Under the Recovery Assistance heading, tap Add Recovery Contact.
- Review the introductory security overview and tap Add Recovery Contact again.
- Authenticate using Face ID, Touch ID, or your device passcode.
- If you belong to a Family Sharing group, eligible members are displayed automatically. Otherwise, search for a trusted contact in your address book.
- Tap Next. Apple prepares an invitation message within the Messages app.
- Tap Send. Your contact receives the invitation and must tap Accept on their device to complete the link.
How to Add an Account Recovery Contact on Mac
If you prefer configuring account security on a desktop or MacBook running macOS Ventura, Sonoma, or Sequoia:
- Click the Apple menu () in the top-left corner and choose System Settings.
- Click your Name at the top of the left sidebar.
- Click Sign-In & Security.
- Select Account Recovery.
- Click Add Recovery Contact and authenticate with Touch ID or your Mac administrator password.
- Select a trusted individual from Family Sharing or your Contacts.
- Send the Messages invitation and await their confirmation.
How to Use Your Recovery Contact to Unlock Your Account
If you ever find yourself locked out of your Apple ID and unable to remember your password:
- Navigate to iforgot.apple.com or initiate password recovery on any Apple device.
- Follow the on-screen steps until prompted to contact your Account Recovery Contact.
- Contact your friend or family member in person or over the telephone.
- On their Apple device, your contact navigates to Settings > [Their Name] > Sign-In & Security > Account Recovery.
- They tap your name and select Get Recovery Code.
- A six-digit code appears on their screen. They read this code to you.
- You enter the six-digit code on your device, enabling you to immediately reset your Apple ID password and regain access to all encrypted iCloud data.
Frequently Asked Questions
Can my recovery contact reset my password without my consent?
No. Generating a recovery code on their device does nothing on its own. The code is only functional when inputted into an active recovery session that you initiated on your own device.
What happens if my recovery contact changes their phone or phone number?
Because the connection is tethered directly to their Apple ID account rather than a specific phone number or SIM card, upgrading devices or changing carriers does not sever the recovery link.
Can I remove or replace a recovery contact later?
Yes. You can return to Settings > Sign-In & Security > Account Recovery at any time, tap any designated contact’s name, and select Remove Contact.