Why iCloud Photo lockouts happen and what it means for your data
Short answer: When an Apple ID is locked — due to suspected unauthorised access, too many failed password attempts, or a lost trusted phone number — all iCloud services including Photos become inaccessible. Your photos are not deleted; they are stored on Apple’s servers and held intact during the lockout period. The challenge is proving your identity to Apple so the account is unlocked. For Indian users, the most common blocker is that the two-factor authentication (2FA) SMS was set to a phone number that is no longer active — a number that was ported, changed, or deactivated by the carrier after three months without recharging.
How to recover iCloud Photos after account lockout
Step 1: Check for an active iCloud.com session
Before starting any account recovery process, check whether any device in your household is still signed into iCloud in a web browser. Open a browser and go to icloud.com. If a session is still active (browsers can maintain sessions for days to weeks depending on settings), you will be taken directly to the iCloud home screen. Go to Photos immediately and use the Select All and Download option to export your library. This is a time-sensitive window — the session could expire or Apple could force a re-authentication at any time. Copy everything to an external drive first, then address the account recovery. Similarly, check whether the Photos app on any Mac in the house still shows the library — if the Mac is signed into the same Apple ID and has a downloaded copy, your photos are already on that Mac’s local storage.
Step 2: Apple ID account recovery at iforgot.apple.com
Go to iforgot.apple.com and enter your Apple ID email. Apple will offer available verification paths in order of preference: (1) a trusted device (an iPhone or iPad still signed in), (2) the trusted phone number (SMS code), (3) a Recovery Contact (a trusted person you added to your account in advance through Settings → Apple ID → Password & Security). If your trusted phone number is a currently active Indian number, the SMS will arrive within seconds. If it is no longer active, choose “Can’t access this number” and Apple will offer alternative verification. Do not attempt to guess the password more than three times — further incorrect attempts escalate the lockout and extend the recovery wait time.
Step 3: Use a Recovery Contact if you set one up
A Recovery Contact is a person you designate in advance (a family member or trusted colleague) who can generate a recovery code on your behalf from their device. If you set one up: contact the person, ask them to go to Settings → [Their name] → Password & Security → Recovery Contacts, and generate a code for your account. They will see a 6-digit recovery code that expires in 15 minutes. Enter it at iforgot.apple.com to verify identity and reset your password. This path bypasses the 1–4 week identity review entirely. For Indian users who have not set up a Recovery Contact yet — do it now through Settings → Apple ID → Password & Security → Account Recovery on your iPhone or Mac.
Step 4: The India angle — the SIM deactivation trap
Indian mobile carriers deactivate SIM numbers after 90 days of inactivity (no outgoing calls or data). This is unique to the Indian regulatory context. Many Indian users registered their Apple ID with a number that was later ported to a different plan, lost, or fell inactive. When this happens, the 2FA path is broken. The medium-term solution is the account recovery flow: at appleid.apple.com/account/recover, submit a recovery request. Apple verifies your identity using purchase history, device list, and account activity over a period of 1–4 weeks. The photos are held safely throughout this period. To prevent this situation permanently: update your trusted phone number as soon as you change SIM or number, and add a Recovery Contact as a second layer. See our Mac FileVault recovery guide for a parallel scenario where Apple ID is the recovery path.