Your Mac can insist an Apple ID password is “incorrect” even when it’s right—usually because a saved credential is stale, the sign-in session is stuck, or iCloud services are out of sync.
Start with the quick checklist below (2–5 minutes). If that doesn’t fix it, the deeper steps will.
Quick checklist (do these first)
- Confirm you’re using the right Apple ID (email/phone) in System Settings.
- Try signing in on the web at appleid.apple.com to confirm the password works.
- Restart your Mac (clears stuck sign-in processes).
- Turn off VPN/ad blockers temporarily (they can break Apple sign-in calls).
- Check date & time: set it automatically, then retry.
- Update macOS if you’re a few versions behind.
If you’re still seeing “incorrect password,” follow the steps in order.
1. Verify it’s not an Apple ID lockout (or a “different password” situation)
Before changing anything on your Mac, make sure Apple is actually accepting your credentials.
- On your Mac (or phone), go to appleid.apple.com and try to sign in.
- If you can’t sign in there either, use Forgot Apple ID or password to reset safely.
- If the web sign-in works but your Mac fails, the issue is likely a cached password, Keychain entry, or a stuck iCloud session.
Also double-check the Apple ID shown in System Settings matches the one that worked on the website.
2. Fix the most common cause: Keychain has the old password
Even after you change an Apple ID password, macOS can keep trying the old one from Keychain—then repeatedly prompts or claims the password is wrong.
- Open Applications > Utilities > Keychain Access.
- In the search box, type Apple ID or idmsa.
- Look for entries that clearly relate to Apple ID sign-in (common ones include idmsa tokens).
- If you see multiple suspicious/old entries, delete only the ones that look like Apple ID sign-in tokens (not your saved website passwords).
- Restart your Mac, then try signing in again in System Settings.
If you’re unsure which item to delete, a safer approach is to remove the most obviously duplicated “idmsa” entries first, then re-test.
3. Sign out of Apple ID on the Mac (then sign back in cleanly)
A broken session can cause the password prompt to fail even when your credentials are correct.
- Go to System Settings > Apple Account (Apple ID).
- Scroll down and choose Sign Out.
- Restart your Mac.
- Sign back in and follow prompts for iCloud services.
Tip: If you’re prompted to keep a copy of data (contacts, calendars, etc.), it’s usually fine to keep a copy locally. You can merge again when you sign back in.
4. Check date, time, and time zone (it matters for sign-in tokens)
If your Mac’s clock is off, Apple’s authentication tokens can fail validation and you’ll get repeated password rejections.
- Go to System Settings > General > Date & Time.
- Turn on Set time and date automatically.
- Also confirm Time Zone is correct (set automatically if available).
- Retry Apple ID sign-in.
This fix is surprisingly common after travel, dual-boot setups, or long sleep/hibernation periods.
5. Rule out network filtering: VPN, DNS filters, content blockers, and captive Wi‑Fi
Apple ID sign-in uses several Apple domains and certificate checks. VPNs, custom DNS, “security” apps, or captive Wi‑Fi portals can interrupt the flow and look like a password problem.
- Temporarily disable VPN (System Settings > VPN).
- If you use a DNS filter (NextDNS, AdGuard DNS, Pi-hole), try switching to default DNS temporarily.
- Try a different network (phone hotspot is great for a quick test).
- If you’re on hotel/office Wi‑Fi, open Safari and load any site to confirm you’ve completed the captive portal sign-in.
Once sign-in succeeds, you can re-enable filters one by one to find the culprit.
6. Update macOS (and restart Apple ID background services)
If the Mac is behind on updates, Apple Account sign-in components can misbehave—especially after Apple ID security changes.
- Go to System Settings > General > Software Update and install available updates.
- Restart afterward (don’t skip this).
If you already updated and it still fails, a restart plus the Keychain step above usually clears the underlying stuck service.
7. When to stop and use account recovery (to avoid lockouts)
If you’ve tried multiple times and you’re seeing security warnings (or you can’t sign in on the web anymore), stop guessing. Too many attempts can trigger temporary locks.
- Use iforgot.apple.com for password reset or account recovery.
- If you have another trusted device signed in (iPhone/iPad), approve sign-in prompts there instead of retrying on the Mac repeatedly.
- If you suspect someone else has your password, change it and review devices under your Apple Account.
Final thoughts
When a Mac rejects a correct Apple ID password, it’s often not the password—it’s a stale Keychain token, a stuck session, or time/network conditions breaking verification.
Start with the checklist, then focus on Keychain cleanup and a clean sign-out/sign-in. Those two resolve most cases without risky changes.