Your AppleID is the account you use to access Apple services like the AppStore, AppleMusic, iCloud, iMessage, FaceTime, and more. Your account includes the email address and password you use to sign in as well as the contact, payment, and security details you use across Apple services. Apple employs industry-standard practices to safeguard your AppleID.
Best practices for maximizing the security of your AppleID
Don’t let others use your AppleID, even family members.
To share purchases, subscriptions, a family calendar, and more without sharing AppleIDs, set up Family Sharing.
Use two-factor authentication. If you created your AppleID on a device with iOS13.4, iPadOS13.4, macOS10.15.4, or later, your account automatically uses two-factor authentication. If you previously created an AppleID account without two-factor authentication, turn on two-factor authentication.
Never provide your password, security questions, verification codes, recovery key, or any other account security details to anyone else. Apple will never ask you for this information.
When accessing your AppleID account page in Safari or another web browser, look for the lock icon
in the address field to verify that your session is encrypted and secure.When using a public computer, always sign out when your session is complete to prevent other people from accessing your account.
Avoid phishing scams. Don’t click links in suspicious email or text messages and never provide personal information on any website you aren’t certain is legitimate. See the Apple Support article Recognize and avoid phishing messages, phony support calls, and other scams.
Don’t use your password with other online accounts.
If one of your devices is lost or stolen, turn on Lost Mode as soon as possible for that device. (You can do this on a friend’s device and don’t need to use your own.)
in the address field to verify that your session is encrypted and secure.Add Account Recovery Contacts
Choose one or more people you trust as Account Recovery Contacts to help you reset your AppleID password and regain access to your account if you ever forget your password or get locked out.
Go to Settings 
> [yourname]> Sign-In & Security> Account Recovery, tap Add Recovery Contact, then follow the onscreen instructions.
For more information, go to Settings > [yourname]> Sign-In & Security, then tap “Learn more” below Add Recovery Contact.
Add Legacy Contacts
The Digital Legacy program allows you to designate people as Legacy Contacts so they can access your AppleID account in the event of your death.
Go to Settings > [yourname]> Sign-In & Security> Legacy Contact, tap Add Legacy Contact, then follow the onscreen instructions.
For more information about how to share the access key with a legacy contact, how to remove a legacy contact, and how your legacy contact can request access to your account, see the Apple Support article How to add a Legacy Contact for your AppleID. Also see the Apple Support article Data that a Legacy Contact can access.
Generate a recovery key for your account
For additional control over your account security, you have the option to generate a recovery key that helps you reset your account password or regain access to your AppleID. A recovery key is a randomly generated 28-character code that you should keep in a safe place. You can reset your account password by either entering your recovery key or using another device already signed in with your AppleID. To ensure you have access to your account, you are personally responsible for maintaining access to the recovery key and your trusted devices.
See the Apple Support article How to generate a recovery key.
For more information about best practices, see the Apple Support article Security and your AppleID.
To set up or manage your AppleID, go to the AppleID website.
If you forgot your AppleID or password, see the Recover your AppleID website.
