If you’ve ever forgotten a password, you know the drill: tap “Forgot password”, answer a few prompts, and you’re back in. Apple has a feature that makes your account dramatically harder for anyone else to break into — but it also quietly switches that familiar safety net off. It’s called a recovery key, and it’s well worth understanding before you turn it on.
🔑 In one sentence
A recovery key is a 28-character code that makes your Apple Account far harder to break into — but it switches off Apple’s standard recovery, so if you lose it, no one can get you back in.
What a recovery key actually is
A recovery key is a 28-character code that Apple generates for your Apple Account. Once it’s switched on, getting back into your account no longer relies on Apple’s standard recovery process. Instead, recovery requires your recovery key, a trusted phone number, and one of your Apple devices.
That’s a serious security upgrade. A scammer who has talked their way past Apple Support, or who has your email and phone number, still can’t reset their way into your account without that 28-character code. And if you use Advanced Data Protection for iCloud, the recovery key also helps you unlock your end-to-end encrypted data.
The catch — and it’s a big one
Turning on a recovery key disables Apple’s normal account recovery. Recovery then depends entirely on you having both the key and your trusted phone number. This is the part we see go wrong at the bench: a recovery key is only as safe as your ability to find it again months — or years — down the track.
⚠️ Don’t lose it
If you lose your recovery key and your trusted phone number, Apple cannot issue a new one — your account and everything in it can be gone for good.
There’s no back door, by design. Store the key somewhere safe, in more than one place, before you rely on it.
Where to keep it (and where not to)
Write the key down or print it, and keep a copy in more than one safe place — for example a home safe and with a trusted family member. Apple specifically warns against storing it in any of these:
- The Passwords app
- Notes
- iCloud Photos
- iCloud Drive
The reason is simple: if you’re locked out of your account, you’re locked out of all of those too — so the key would be trapped behind the very door it’s meant to open.
How to turn it on
On iPhone or iPad: Settings → [your name] → Sign-In & Security → Recovery Key. Follow the prompts, write the key down, then re-enter it to confirm.
On Mac: System Settings → [your name] → Sign-In & Security → Recovery Key → Turn On. Record the key, then confirm it.
You’ll need iOS 14, iPadOS 14, or macOS Big Sur (or later) and two-factor authentication turned on. Apple may also ask for the key later when you change account details — such as adding a new trusted phone number — so keep it within reach. To generate a fresh code, use Replace Recovery Key in the same settings; to switch the feature off and restore standard recovery, use Remove Recovery Key.
Should you switch it on?
A recovery key is an excellent choice if you hold sensitive data, have been targeted by scammers, or simply want the strongest possible lock on your Apple Account — and you’re confident you can store the code safely for the long haul. If keeping track of an important piece of paper for years sounds like a risk, Apple’s standard recovery (or a recovery contact) may suit you better.
A recovery key works best alongside the other locks on your Apple Account. If you found this useful, read our companion guides on two-factor authentication, passkeys, and how to spot a scam.
Not sure which is right for you — or already locked out? Geekworks can help. We deal with Apple Account security, data recovery and account lockouts every week. Drop into the shop or get in touch, and we’ll walk you through the safest setup for your situation.
Source: Apple Support — “Set up a recovery key for your Apple Account” (apple.com, published 23 September 2026).