1 Two Kinds of Lockouts — Know Which One You Have
A 'locked' Apple Account means two very different situations. The first is a security lock: you (or someone else) entered the wrong password too many times, or two-factor codes were rejected repeatedly, and Apple has temporarily blocked sign-in. This resolves itself — the lock lifts after a waiting period, usually within a few hours — and you can regain access the moment you correctly answer your password and a trusted device code. The second is a full lockout: you have lost the password AND no trusted device can receive verification codes AND your trusted phone number is no longer in your possession. This second situation triggers the formal account recovery process, which can take days or weeks. The distinction matters because the fixes are entirely different: for a security lock, simply wait and sign in correctly; for a full lockout, you must start recovery at iforgot.apple.com, and everything about that process — its delays, its requirements, its limits — flows from the fact that Apple must verify you are the true owner without any of the normal verification channels. Misdiagnosing a temporary security lock as a full lockout leads people to start unnecessary recovery requests, which then freeze other options and extend the total delay. Always first try signing in with a known password on a trusted device; only if that is impossible should recovery begin.
两种锁定——先分清你遇到的是哪种
'被锁'的 Apple 账户指两种完全不同的情况。第一种是安全锁定：你（或他人）多次输错密码，或双重认证验证码被反复拒绝，Apple 临时阻止登录。这种情况会自行解决——通常几小时内锁定解除，只要你正确输入密码和受信任设备的验证码即可恢复访问。第二种是完全锁定：你丢失了密码，且没有任何受信任设备能接收验证码，且受信任电话号码也不再为你所有。第二种情况触发正式的账户恢复流程，可能需要数天到数周。这个区别很重要，因为解决方法完全不同：安全锁定只需等待并正确登录；完全锁定则必须在 iforgot.apple.com 发起恢复，而该流程的一切——延迟、要求、限制——都源于 Apple 必须在没有任何常规验证渠道的情况下确认你是真正的主人。把临时安全锁定误判为完全锁定的人会发起不必要的恢复请求，反而冻结其他选项并延长总延迟。永远先用已知密码在受信任设备上尝试登录；只有确实不可能时才开始恢复。
What actually happens during Apple account recovery: realistic timelines, what shortens the wait, recovery keys versus trusted numbers, and how to avoid turning a temporary lockout into a permanent loss.
详解 Apple 账户恢复的真实流程：实际时间线、如何缩短等待、恢复密钥与受信任号码的区别，以及如何避免把临时锁定变成永久损失。
2 What Account Recovery Actually Looks Like
Recovery starts at iforgot.apple.com: you enter your account email, confirm a phone number that can receive SMS (it does not have to be the trusted number on file, but using the original trusted number shortens the wait), and then Apple presents an on-screen estimated wait — commonly 24 to 72 hours, longer for accounts with fewer verifiable signals. During the wait you may be asked to confirm details such as the card on file or device history. When the wait ends, Apple sends a text or call with a recovery code to the number you provided; entering that code on the trusted link lets you reset the password. Two properties of this process catch people off guard. First, it is deliberately slow — the delay is a security feature against attackers, not a queue problem, and calling support cannot expedite it in most cases. Second, it is fragile: starting a new recovery request while one is pending cancels the original and restarts the clock, and providing incorrect verification info mid-process can extend the wait. The practical discipline is: start one request, write down the date and the phone number used, keep that number active, and wait. Do not create new requests, do not guess at verification answers, and do not pay anyone who claims they can speed it up — that is a scam, covered in detail in our fake support guide.
账户恢复的真实流程
恢复从 iforgot.apple.com 开始：输入账户邮箱，确认一个能接收短信的电话号码（不一定是账户上的受信任号码，但使用原受信任号码能缩短等待），然后 Apple 会在屏幕上给出预计等待时间——通常 24 到 72 小时，可验证信号越少的账户等待越久。等待期间可能会被要求确认档案中的银行卡或设备历史等信息。等待结束后，Apple 会向你提供的号码发送短信或来电，告知恢复码；在受信任链接中输入该码即可重置密码。这个流程有两个特性让人措手不及。第一，它刻意缓慢——延迟是防范攻击者的安全特性，不是排队问题，多数情况下联系客服也无法加速。第二，它很脆弱：在已有待处理请求时发起新请求会取消原请求并重置计时，中途提供错误的验证信息也可能延长等待。实际纪律是：发起一个请求，记下日期和所用号码，保持该号码可用，然后等待。不要创建新请求，不要猜测验证答案，也不要付钱给任何声称能加速的人——那是诈骗，详见我们的假客服指南。
3 The Recovery Key Decision: More Security, Less Mercy
Apple offers an optional Recovery Key: a 28-character code that replaces iCloud-based two-factor verification. With a recovery key enabled, your trusted devices and the key itself become the only ways in — losing both means the account is unrecoverable, permanently, even by Apple support. This is a genuine trade-off, not a trick. Against targeted attacks — a stalker who knows your phone number, an ex-partner who can receive your SMS, a SIM-swap attacker who bribes a carrier employee — a recovery key is extremely effective, because it removes the SMS path entirely. For most people, though, the realistic risk is not a targeted attack; it is losing access to their own credentials: a phone that dies, a key printed and lost during a move, a house fire. Statistically, users lose their own recovery keys far more often than attackers defeat SMS verification. Our recommendation: enable a recovery key only if you can store it in two independent physical places (for example, a safe at home and a bank deposit box), and never only in a photo on the phone it protects. If you are not confident in that discipline, the default setup — trusted devices plus a trusted phone number plus a designated Recovery Contact — offers strong protection with a much softer failure mode. A Recovery Contact is a family member or friend who can receive a code to help you back in; they cannot see your data, only help restore access.
恢复密钥的取舍：更安全，也更无情
Apple 提供可选的恢复密钥：一串 28 位字符的代码，取代基于 iCloud 的双重认证验证。启用恢复密钥后，受信任设备和密钥本身成为唯一入口——两者都丢失意味着账户永久无法恢复，连 Apple 客服也无能为力。这是真实的取舍，不是陷阱。针对定向攻击——知道你手机号码的跟踪者、能接收你短信的前伴侣、贿赂运营商员工的换卡攻击者——恢复密钥极其有效，因为它彻底移除了短信路径。但对大多数人来说，现实风险不是定向攻击，而是丢失自己的凭据：手机损坏、搬家时打印的密钥遗失、房屋火灾。从统计上看，用户弄丢自己恢复密钥的频率远高于攻击者攻破短信验证。我们的建议：只有当你能把密钥存放在两个独立的物理位置（例如家中保险箱和银行保管箱）时才启用，绝不能只存在它所保护的那部手机的照片里。如果你对这种自律没把握，默认配置——受信任设备＋受信任号码＋指定的恢复联系人——提供强保护且失败模式温和得多。恢复联系人是能接收代码帮你恢复访问的家人或朋友；他们看不到你的数据，只能帮助恢复访问。
4 What You Can and Cannot Recover: The Data Map
When a lockout is resolved, what comes back depends on what was synced. iCloud-backed data — photos (if within your storage plan), contacts, calendars, notes, iCloud Drive files, passwords in iCloud Keychain — returns with the account, because it lives on Apple's servers. Data that lived only on the device and was not backed up is governed by the device's own lock: if you cannot unlock the iPhone itself (forgotten screen passcode), the only path is a device erase, and anything not backed up to iCloud or a computer is gone. App-specific data is the middle ground: WhatsApp chats, banking app tokens, and authenticator apps store data locally or in their own cloud, and re-signing into Apple does not restore them automatically. This is why the single most valuable habit is verified, automatic iCloud backup: Settings > your name > iCloud > iCloud Backup, then confirm the last successful backup date under 'Back Up Now'. Before any risky operation — password changes, region switches, device trade-ins — check that date. During an active lockout, do not erase or reset the device in panic; the data on it may be the only remaining copy. An erased device with an unresolvable activation lock is the true worst case, because activation lock ties the hardware to the account and no data recovery service can bypass it legitimately.
能恢复与不能恢复的：数据地图
锁定解除后，能找回什么取决于什么被同步过。iCloud 备份的数据——照片（在存储方案范围内）、通讯录、日历、备忘录、iCloud 云盘文件、iCloud 钥匙串中的密码——会随账户一起回来，因为它们存在 Apple 服务器上。只存在于设备上且未备份的数据则受设备自身锁约束：如果无法解锁 iPhone 本身（忘记屏幕密码），唯一出路是抹掉设备，任何未备份到 iCloud 或电脑的东西都会丢失。应用自有数据处于中间地带：聊天记录、银行应用令牌、验证器应用的数据存本地或自家云端，重新登录 Apple 不会自动恢复它们。因此最有价值的习惯是经过验证的自动 iCloud 备份：设置 > 你的名字 > iCloud > iCloud 备份，然后在'立即备份'下确认最近一次成功备份的日期。在进行任何高风险操作前——改密码、切换地区、以旧换新——先检查那个日期。处于活跃锁定期间，不要慌乱中抹掉或重置设备；上面的数据可能是仅存副本。被抹掉且激活锁无法解除的设备才是真正的最坏情况，因为激活锁把硬件绑定到账户，任何数据恢复服务都无法合法绕过它。
"When a lockout is resolved, what comes back depends on what was synced."
「锁定解除后，能找回什么取决于什么被同步过。」
5 Prevention: The Five-Minute Audit That Saves Weeks
Run this audit today, while you have full access — every item takes under a minute. First, open Settings > your name > Sign-In & Security and check the trusted phone number: is it a number you still control? Old numbers, employer-issued numbers, and numbers in another country are the leading cause of total lockouts. Second, add a second trusted number if available — a partner's phone doubles your rescue paths. Third, set up a Recovery Contact (Sign-In & Security > Account Recovery), someone physically reachable who will still be reachable in five years. Fourth, verify your rescue email address is one you can still log into; a dead rescue email silently breaks the entire recovery chain. Fifth, confirm iCloud Backup shows a successful backup within the last 24 hours, and check your storage plan covers your photo library. Sixth, write down — on paper, not in the phone — your account email, your trusted numbers, and your recovery contact's name, and store it with important documents. People who complete this audit almost never experience the multi-week recovery process, because they always retain at least one working verification path. The lockout stories that end badly almost always involve two failures at once: a lost password plus one of these neglected settings.
预防：省下数周的五分钟检查
趁你现在拥有完全访问权限，今天就做这个检查——每项不到一分钟。第一，打开设置 > 你的名字 > 登录与安全，检查受信任电话号码：还是你能控制的号码吗？旧号码、单位配发的号码、境外号码是完全锁定的头号原因。第二，如果可行，添加第二个受信任号码——伴侣的手机能让救援路径翻倍。第三，设置恢复联系人（登录与安全 > 账户恢复），选择一个物理上可达、五年后仍可达的人。第四，确认救援邮箱是你仍能登录的邮箱；失效的救援邮箱会悄悄断掉整条恢复链。第五，确认 iCloud 备份显示最近 24 小时内成功备份过，并检查存储方案是否覆盖你的照片图库。第六，用纸笔——不要存在手机里——写下你的账户邮箱、受信任号码和恢复联系人姓名，与重要文件放在一起。完成这项检查的人几乎不会经历数周的恢复流程，因为他们始终保留至少一条可用的验证路径。结局糟糕的锁定故事几乎都涉及双重失败：丢失密码加上这些被忽视的设置之一。
6 Special Cases: Deceased Owners, Business Accounts, and Inherited Devices
Three edge cases deserve honesty. For a deceased family member's account, Apple has a legacy contact system — but only if the owner designated a legacy contact before death (Settings > your name > Sign-In & Security > Legacy Contact). Without one, inheritance requires a court order and documentation through Apple's legal channel, a process that takes months. This is a strong argument for setting a legacy contact today, especially for the account that holds the family photo library. For business-managed accounts, a device enrolled in an MDM (mobile device management) program or owned by an employer may be remote-locked by the organization at any time, and personal Apple Account recovery does not apply; the resolution path is the employer's IT department, not Apple support. For inherited or second-hand devices stuck at activation lock: if you bought a used iPhone and it asks for the previous owner's password, return it to the seller — there is no legitimate bypass, and every tool claiming otherwise is a scam or malware. If you are the previous owner selling, sign out of the Apple Account (Settings > your name > Sign Out) and erase the device before it leaves your hands; a device sold with activation lock active is effectively a brick to the buyer and a data risk to you.
特殊情况：去世机主、企业账户与继承设备
三种边缘情况值得如实说明。对于已故家庭成员的账户，Apple 有遗产联系人系统——但前提是机主生前指定了遗产联系人（设置 > 你的名字 > 登录与安全 > 遗产联系人）。如果没有指定，继承需要通过 Apple 法务渠道提交法院命令和证明文件，耗时数月。这有力地支持今天就设置遗产联系人，尤其是存放家庭照片库的账户。对于企业管理的账户，注册了 MDM（移动设备管理）或属于雇主的设备可能随时被组织远程锁定，个人 Apple 账户恢复不适用；解决路径是雇主 IT 部门，不是 Apple 客服。对于卡在激活锁的继承或二手设备：如果你买的二手 iPhone 要求前机主密码，把它退给卖家——不存在合法绕过方法，所有声称能绕过的工具都是诈骗或恶意软件。如果你是出售的前机主，在设备离手前退出 Apple 账户（设置 > 你的名字 > 退出登录）并抹掉设备；带着激活锁卖出的设备对买家而言是砖，对你则是数据风险。