Modern Apple devices store essential personal data, encrypted credentials, photo libraries, and cloud backups tied directly to your Apple Account (formerly Apple ID). However, forgetting your master account password or getting locked out of all trusted hardware can initiate a prolonged, multi-day automated account recovery process. To prevent permanent lockouts without compromising zero-knowledge encryption, Apple provides the Account Recovery Contact architecture. Designating a trusted friend or family member as a recovery contact allows them to generate a secure verification code to help you regain access within minutes.
How Account Recovery Contacts Work (Security and Privacy)
Designating an account recovery contact does not compromise your personal privacy or grant third-party access to your personal files:
- Zero Data Access: Your recovery contact cannot access your messages, iCloud photos, notes, or account settings. They have no visibility into your account state.
- One-Way Verification: The contact’s sole function is to authenticate your identity and generate a temporary six-digit recovery code on their own Apple device.
- End-to-End Cryptography: When paired with Advanced Data Protection for iCloud, recovery contacts act as part of the cryptographic recovery key mechanism without ever holding the decryption keys themselves.
Requirements for Setting Up a Recovery Contact
Before adding a contact, verify that both accounts meet the technical prerequisites:
- Your device must run iOS 15, iPadOS 15, macOS Monterey 12, or newer.
- Two-Factor Authentication (2FA) must be enabled on your Apple Account.
- You must be at least 13 years of age.
- Your nominated contact must also own an active Apple device (iPhone, iPad, or Mac) running compatible software and have Two-Factor Authentication turned on.
Setting Up an Account Recovery Contact on iPhone and iPad
To configure your trusted contact from an iOS or iPadOS device:
- Open the Settings app.
- Tap your Name banner at the top of the screen.
- Select Sign-In & Security.
- Tap Account Recovery.
- Under the Recovery Assistance section, tap Add Recovery Contact.
- Authenticate using Face ID, Touch ID, or your device passcode.
- If you belong to a Family Sharing group, your family members appear as suggested contacts. Otherwise, tap Choose Someone Else and search for your contact in your address book.
- Tap Next. Apple presents a pre-composed message explaining the request. Tap Send to deliver the invitation via iMessage.
The invitation remains pending until your contact opens the message and taps Accept on their device.
Setting Up an Account Recovery Contact on Mac
To configure your recovery contact on macOS:
- Click the Apple menu () and choose System Settings.
- Click your Name at the top of the sidebar.
- Click Sign-In & Security in the right pane.
- Select Account Recovery.
- Click Add Recovery Contact.
- Authenticate with Touch ID or your Mac administrator password.
- Select your trusted contact from Family Sharing or your Contacts list.
- Send the invitation prompt via Messages.
How to Use Your Recovery Contact if You Get Locked Out
If you forget your Apple Account password or lose access to your trusted devices:
- Visit iforgot.apple.com on any browser, or follow the onscreen password reset instructions during device setup.
- When prompted for authentication methods, choose Ask your Recovery Contact for help.
- Contact your designated person via phone call or in person.
- On their Apple device, your contact navigates to:
Settings > [Their Name] > Sign-In & Security > Account Recovery. - They tap your name under Recovery for Others and tap Get Recovery Code.
- Their device displays a six-digit recovery code.
- Enter this six-digit code on your lockout screen to reset your password and restore account access instantly.
Managing and Removing Recovery Contacts
You can add up to five recovery contacts to your Apple Account to ensure redundancy if one contact is unavailable. To remove or replace a contact:
- Navigate back to Sign-In & Security > Account Recovery.
- Tap the contact’s name.
- Select Remove Contact.
- Apple notifies the individual that they have been removed from your account assistance list.
Account Recovery Contact vs Legacy Contact Comparison
| Feature | Account Recovery Contact | Legacy Contact |
|---|---|---|
| Primary Purpose | Help living account owner regain lost access | Access data in the event of account owner’s death |
| Data Access Level | Zero access to photos, files, or messages | Full access to archive data upon death certificate review |
| Code Function | Provides 6-digit dynamic reset code | Provides long-term cryptographic access key |
| Account Status | Account remains active and personal | Account transitioned to archive state |