Apple Account Recovery Contact or Recovery Key: Which to Use
Apple offers two ways to prepare for losing access: a recovery contact and a recovery key. Learn how each works, how to set them up and the trade-offs involved.
A recovery contact is someone you trust who can get a six-digit code to help you reset your Apple Account password. A recovery key is a 28-character code you keep yourself, which turns off standard account recovery. Set contacts up in Settings, your name, Sign-In and Security, Recovery Contacts. Choose a key only if you can store it safely.
Summary
A recovery contact is a trusted person who can get a six-digit recovery code for you to regain access.
You can choose up to five recovery contacts, who need iOS 15 or later and iMessage.
A recovery key is a 28-character code that replaces Apple's standard account recovery.
Apple cannot give you your recovery key, so losing it and your devices can mean permanent lockout.
Do not keep the recovery key in Passwords, iCloud Photos, Notes or iCloud Drive.
If you forget your Apple Account password and lose your trusted devices at the same time, getting back in can take a long time through standard account recovery. Apple gives two ways to prepare in advance. A recovery contact is a person you trust who can help you prove it is you. A recovery key is a code that puts recovery entirely in your hands. They suit different people, and choosing a recovery key has serious consequences if you lose it. This guide explains both, with the steps Apple gives.
Last checked: 20 October 2026 against Apple Support.
Apple says a recovery contact is someone you trust, such as a friend or family member, who can help you regain access to your account if you forget your password or are locked out. Apple says recovery contacts have no access to your account, only the ability to give you a code, and that Apple does not know who your recovery contacts are, so you need to remember who they are yourself (Apple Support).
On your iPhone or iPad, open Settings and tap your name.
Tap Sign-In and Security, then Recovery Contacts.
Tap Add Recovery Contact and follow the onscreen steps.
Choose a recommended contact, or tap Choose Someone Else.
Someone outside your Family Sharing group accepts the invitation in Messages.
Apple says people in your Family Sharing group are added automatically, and you are notified if a contact declines or removes themself, so you can choose someone new. On a Mac, the same option is in System Settings under your name, then Sign-In and Security.
Apple says that if you forget your password and cannot reset it, you start the account recovery process. After verifying some information, you reach out to your recovery contact in person or on the phone. They can help you in person or get a six-digit recovery code for you, and after you enter it on your own device you can reset your Apple Account password. Apple also says that without a recovery contact you can still go through full account recovery, but it can take longer.
Apple describes a recovery key as a 28-character code that you use, along with a trusted phone number and an Apple device, to regain access to your Apple Account. Setting one up turns off Apple's standard account recovery process, so you must use the key and your trusted phone number to reset your password. Apple says you may also be asked for it when changing certain details, such as adding a trusted phone number (Apple Support).
Apple says not to store the recovery key in the Passwords app, iCloud Photos, Notes or iCloud Drive, because if you lose access to your account you will not be able to open them. It suggests printing or writing it down, keeping it in more than one safe place and, if you wish, giving a copy to a trusted family member. You can generate a new key with Replace Recovery Key, and Remove Recovery Key turns standard account recovery back on.
Many people find a recovery contact the gentler option, because standard account recovery stays available. A recovery key gives stronger control but leaves less room for error.
Apple also supports physical security keys for sign-in. If you use them, Apple says you need at least two, and that losing all your keys and trusted devices could also mean permanent lockout (Apple Support). Our guide on Apple security keys covers that setup.
Apple's own settings, help pages and forms are the official routes. Anyone who messages you offering to restore or unlock your account, or who asks for your password, codes or recovery details, is not part of that process. Never share them. Our guide on spotting fake recovery services lists the warning signs.
Apple controls account recovery. A recovery contact has no access to your account, and Apple cannot provide a lost recovery key. Without either, full account recovery remains available unless you turned on a recovery key, though it can take longer. For lost trusted devices, see Apple two-factor and a lost trusted device.
AwareXone helps people review account access and security through official platform routes. We are independent and not affiliated with Apple, the work is best-effort, and Apple makes the final decision. Read more about our account security.
Can my recovery contact see my iCloud data?
No. Apple says recovery contacts have no access to your account, only the ability to give you a code.
How many recovery contacts can I have?
Apple says up to five, each with a supported Apple device and iMessage on.
What happens if I lose my recovery key?
Apple says that if you set up a recovery key and cannot provide it when you lose access, you will be locked out permanently. While you can still sign in, you can replace or remove it.
Can I use both a recovery contact and a recovery key?
Both are set up in Sign-In and Security. Apple says a recovery key turns off standard account recovery, so weigh that before adding one.