Signs that suggest your iPhone may be hacked

A hacked iPhone usually shows one or more of these concrete signs: your battery drains much faster than normal even when you're not using the phone heavily, your data usage spikes without explanation, apps crash repeatedly or open on their own, your phone runs noticeably slower, or you see unfamiliar apps you didn't install. You might also notice your phone getting hot when you're not using it, or your screen lighting up with notifications you didn't trigger.

Less obvious but real signs include your contacts reporting that they received messages from you that you didn't send, your email or social media passwords no longer working (suggesting someone changed them), or your phone asking for your Apple ID password more often than usual. If you notice any combination of these, it's worth investigating further.

One important caveat: many of these signs can also mean your phone simply needs updates, has a storage problem, or is running too many apps at once. A hacked phone isn't the only explanation, but it's one worth ruling out.

Key Takeaways

  • Battery drain, unexpected data usage, and unfamiliar apps are the most common signs of a compromised iPhone.
  • Check your Apple ID login history in Settings to see if someone accessed your account from an unfamiliar device or location.
  • Review your installed apps and remove anything you don't recognize, then change your Apple ID password immediately.
  • If you suspect a serious breach, back up your important data and consider restoring your iPhone from a clean backup or factory reset.

Check your Apple ID login history

Your Apple ID login history is the most reliable place to spot unauthorized access. Go to Settings, tap your name at the top, then select Password and Security. Scroll down to find "Where You're Signed In" — this shows every device currently logged into your Apple ID account.

Look for devices you don't recognize or locations that don't match where you actually live or travel. If you see a device you don't own, tap it and select "Remove from Account." This immediately signs that device out of your Apple ID, which blocks access to your photos, email, and other synced data.

You should also check your Apple ID security settings for any recovery email addresses or phone numbers you didn't add. If someone changed these, they could use them to lock you out of your account or reset your password. If you spot anything unfamiliar, change your Apple ID password right away and update your recovery information.

Review your installed apps and permissions

Go to Settings, then General, then iPhone Storage. This shows every app on your phone in order of size. Scroll through the entire list and look for apps you don't remember installing. Pay special attention to apps with generic names like "System Update," "Settings Manager," or "Security Scan" — these are common names for malicious apps.

If you find an app you don't recognize, tap it and select "Delete App," then confirm. Don't worry about accidentally deleting something important — Apple's built-in apps can't be deleted, and you can always reinstall anything from the App Store.

While you're in Settings, also check which apps have permission to access your location, camera, microphone, and photos. Go to Settings, then Privacy, then select each permission type. Remove access for any app that doesn't need it. For example, a flashlight app shouldn't need access to your contacts or location.

Check your email and social media accounts

If someone has your Apple ID password, they may also have access to your email account — and your email is the master key to everything else. Go to your email provider's website on a computer (Gmail, Outlook, Yahoo, or whatever you use) and look for a "Security" or "Active Sessions" section.

Gmail users should check myaccount.google.com, click Security on the left, then scroll to "Your devices" and select "Manage all devices." You'll see every location where your Gmail account is currently signed in. Outlook users can visit account.microsoft.com and check "Recent activity." If you see logins from places you don't recognize, sign out of those sessions immediately.

Do the same for any social media accounts linked to your Apple ID — Facebook, Instagram, Twitter, and others all have login history sections. Change the passwords on any account where you spot suspicious activity. Use a strong password: at least 12 characters mixing uppercase, lowercase, numbers, and symbols.

Run a backup and consider a factory reset

If you've found real evidence of a breach — unfamiliar devices on your Apple ID, apps you didn't install, or suspicious email logins — the most reliable fix is to restore your iPhone from a clean backup or perform a factory reset.

First, back up your important data. Connect to Wi-Fi, go to Settings, tap your name, select iCloud, then tap iCloud Backup and select "Back Up Now." This saves your photos, messages, contacts, and settings to Apple's servers. Wait for the backup to finish before proceeding.

Next, go to Settings, General, then iPhone Storage and delete any apps you don't recognize. Then go back to Settings, General, and select Transfer or Reset at the bottom. Choose "Erase All Content and Settings." Your phone will restart and return to factory settings. When it boots back up, you can restore from your backup — this removes any malicious apps or settings while keeping your data.

Prevent future hacks with these practices

Use a strong, unique Apple ID password that you don't use anywhere else. Enable two-factor authentication in Settings under your name, Password and Security — this requires a code from your trusted device whenever someone tries to sign into your Apple ID from a new location.

Keep your iPhone updated. Go to Settings, General, then Software Update and install updates as soon as they're available. Apple patches security holes in these updates, and hackers often target older versions.

Be cautious about which apps you install. Stick to the official App Store rather than jailbroken versions or third-party app stores. Read the permissions each app requests before installing — if a calculator app asks for access to your location or contacts, that's a red flag.

Don't use public Wi-Fi for sensitive tasks like banking or email. If you must use public Wi-Fi, use a VPN service like ProtonVPN, Mullvad, or Windscribe, which encrypts your traffic so others on the network can't see it.

When to contact Apple Support

If you've changed your Apple ID password, removed unfamiliar devices, and deleted suspicious apps but still see signs of compromise — battery draining, data usage spiking, or apps crashing — contact Apple Support. Go to support.apple.com, select your iPhone, and choose "Contact Us." You can chat with an Apple representative or schedule a call.

If you believe your Apple ID was compromised, you can also report it directly. Visit iforgot.apple.com and follow the steps to report a compromised account. Apple can help you secure it and review your account activity.

If you've found evidence that your email or financial accounts were accessed, contact those companies directly as well. Most banks and email providers have fraud departments that can help you regain control and monitor for unauthorized charges.

Frequently Asked Questions

Can I get hacked just by visiting a website on Safari?

It's extremely rare on modern iPhones. Safari and iOS have built-in protections against most malicious websites. You're far more likely to be compromised by installing a malicious app or by someone guessing your Apple ID password. Stick to the App Store and use a strong password, and you've covered the main risks.

What does it mean if my phone keeps asking for my Apple ID password?

Frequent password prompts usually mean your password is incorrect somewhere, or your device's date and time settings are wrong. Go to Settings, General, Date and Time and make sure it's set to automatic. If that doesn't help, try signing out of your Apple ID entirely and signing back in with your password. If the prompts continue after that, contact Apple Support.

Is it safe to use a public Wi-Fi network if I'm just browsing?

Browsing is relatively safe, but anyone on the same network can see what websites you visit. If you're logging into email, banking, or social media on public Wi-Fi, use a VPN. If you're just reading news or watching videos, you're fine without one — just avoid entering passwords or payment information.

Do I need to buy antivirus software for my iPhone?

No. iOS doesn't allow antivirus apps to scan your system the way they do on Windows or Android. Any app claiming to scan your iPhone for viruses is either useless or itself malicious. Your best protection is keeping iOS updated, using a strong Apple ID password with two-factor authentication, and sticking to the App Store.

If I restore my iPhone, will that definitely remove a hack?

A factory reset removes almost all hacks because it wipes your phone and reinstalls iOS from scratch. The only exception would be a theoretical hack in the iPhone's firmware itself, which is extraordinarily rare and would require sophisticated nation-state tools. For practical purposes, a factory reset followed by restoring from a clean backup solves the problem.