Apple does send text messages about unusual account activity, but only if you turned on two-factor authentication and set up a phone number for recovery

Apple sends SMS alerts when someone tries to sign into your account from a new device or location, when your password is changed, or when your account recovery information is updated. These texts come from a number that varies by country — in the US, it's often a short code or a number starting with +1. The messages are brief and include a link to review the activity or deny access.

You receive these alerts only if you have two-factor authentication enabled on your Apple ID and have registered a phone number with Apple. If you haven't set up two-factor authentication, Apple will not send you these security texts, even if unusual activity occurs on your account.

Not every login triggers a text. Apple typically sends alerts only when the sign-in attempt comes from a device or location your account hasn't seen before. Signing in on your own iPhone or Mac from home usually won't generate a message. Signing in from a new phone, a different country, or a borrowed computer will.

Key Takeaways

  • Apple sends text messages about account activity only if you have two-factor authentication turned on and a phone number registered with your Apple ID.
  • You'll receive a text when someone tries to sign in from a new device or location, changes your password, or updates your recovery information.
  • The texts come from a short code or number that varies by country and include a link to approve or deny the activity.
  • If you receive a security text you didn't expect, you can deny the sign-in attempt directly from the message.
  • Scammers sometimes send fake Apple security texts that look real — Apple's official texts always include a link to your account settings, never ask for your password, and come from Apple's official numbers.

What triggers an Apple security text

Apple sends a text when the system detects a sign-in from an unfamiliar device or location. This includes signing into iCloud.com from a new computer, signing into an app on a new phone, or accessing your account from a different country. The alert arrives within seconds of the sign-in attempt.

You'll also get a text when your Apple ID password is changed, when someone adds a new trusted phone number to your account, or when your recovery email address is updated. These messages are meant to catch unauthorized changes to your account security settings.

Apple does not send a text for every login. Routine sign-ins on devices you use regularly — your personal iPhone, your home Mac, your work iPad — typically do not trigger an alert. The system learns which devices are yours and stops sending alerts for them after the first time.

How to check if a text from Apple is real

Real Apple security texts always include a link to your account settings, usually something like appleid.apple.com or a similar official Apple domain. The message will never ask you to reply with your password, credit card number, or security codes. Apple already has that information and would never request it by text.

Check the sender's number. In the US, Apple's official security texts come from short codes like 2033 or 244-244, or from numbers that begin with +1 and are clearly marked as coming from Apple in your phone's contact list if you've saved them. Different countries have different numbers — if you're unsure, you can look up Apple's official SMS numbers on Apple's support website.

Scammers often send fake security texts that look almost identical to real ones. The giveaway is usually in the link or the request. If the text asks you to "confirm your identity," "verify your account," or "update your payment method," it's likely a scam. Real Apple texts describe what happened (a sign-in from a new device) and let you approve or deny it — they don't ask you to take action to "fix" something.

What to do if you don't recognize the activity

If you receive a security text about a sign-in you didn't make, tap the link in the message and deny the sign-in attempt. This will block whoever tried to access your account. You can do this directly from the text message — you don't need to open the Apple ID website separately.

After denying the sign-in, change your Apple ID password immediately. Go to Settings > [Your Name] > Password & Security on your iPhone, or visit appleid.apple.com on a computer. Choose a strong password you haven't used before.

If you see multiple unauthorized sign-in attempts or if your account settings have been changed without your permission, contact Apple Support. They can review your account activity, help you secure it, and investigate whether your password was compromised elsewhere.

Turning two-factor authentication on or off

Two-factor authentication is turned on automatically for newer Apple IDs created after 2015. If your account is older, you may need to turn it on manually. On an iPhone, go to Settings > [Your Name] > Password & Security > Two-Factor Authentication and toggle it on. On a Mac, open System Settings > [Your Name] > Password & Security and do the same.

When you turn on two-factor authentication, Apple will ask you to register a phone number. This is the number where you'll receive security texts. You can add multiple phone numbers if you want alerts on more than one device.

If you turn off two-factor authentication, Apple will stop sending you security texts about unusual activity. Your account will be less secure, and you won't be notified if someone tries to sign in without permission. Apple recommends keeping two-factor authentication on.

Why Apple sends these texts and what they protect

The security texts are part of Apple's two-factor authentication system. Their purpose is to make sure that only you can access your Apple ID, even if someone else has your password. When someone tries to sign in from a new device, they need to approve it using a code or a confirmation on a device you already own — usually your iPhone.

These texts protect your email, photos, payment methods, and any data stored in iCloud. They also protect your ability to find or erase your devices if they're lost or stolen. Without two-factor authentication, someone with your password could access all of this.

Frequently Asked Questions

Can I get Apple security texts on a number that's not my main phone?

Yes. You can add multiple trusted phone numbers to your Apple ID, and Apple will send security texts to any of them. Go to Settings > [Your Name] > Password & Security > Trusted Phone Numbers to add or remove numbers. At least one number must remain on your account.

What if I lost the phone number where Apple sends my security texts?

If you no longer have access to your trusted phone number, you can remove it from your account and add a new one. Sign into appleid.apple.com on a computer, go to Password & Security, and update your trusted phone numbers. If you can't sign in, you may need to contact Apple Support to regain access to your account.

Do I have to respond to Apple's security texts?

You don't have to respond immediately, but you should review the activity soon. If you approve a sign-in, that device becomes trusted and won't trigger alerts in the future. If you deny it, the sign-in is blocked and you should change your password.

Why did I get a security text for something I did?

Apple's system sometimes flags routine activity as unusual, especially if you're traveling, using a VPN, or signing in from a new location. This is normal and means two-factor authentication is working. You can approve the sign-in, and future logins from that device or location will be recognized as yours.

Can scammers use Apple security texts to trick me?

Yes. Scammers send fake texts that look like they're from Apple, asking you to click a link and enter your password or payment information. Real Apple texts never ask for passwords or payment details. If you're unsure, don't click the link in the text — instead, go directly to appleid.apple.com in your web browser and check your account activity there.