Skip to content
iPhone

iPhone keeps asking to change passcode? 6 fixes

A repeating prompt to change your passcode usually comes from a rule set by a work or school email account or a configuration profile on the iPhone. Meeting the rule or removing what sets it stops the alert.

Agha Ali Abbas6 min read
A closed padlock on a black surface

Photo by Kedibone Isaac Makhumisane on Unsplash

A message tells you to change your passcode, you dismiss it, and it returns an hour later. Sometimes it counts down. It looks like a warning from Apple, and it is easy to wonder whether something is wrong with your account. In most cases it is a rule set by an account or profile on your phone, and the fix is quick once you find the source. This guide explains the likely causes, the safe way to change the passcode, and how to tell a real alert from a scam. Menu names can differ by iOS version.

Why does my iPhone keep asking me to change my passcode?

iOS itself does not nag you to change your passcode on a schedule. A repeating prompt almost always comes from outside the phone’s own settings. Apple’s passcode support page has a short section for an alert that tells you to change your passcode or that stops you changing passcode settings, and the usual source is a policy.

  • Work or school email. An Exchange or Microsoft 365 account can require a longer or stronger passcode on any phone that connects to it.
  • A configuration profile. A company, school or app can install a management profile with a passcode rule.
  • A weak passcode. Some versions flag simple codes such as 1234 or repeated digits.
  • Beta software. Beta iOS builds can show extra prompts.
  • A scam. A fake alert from a website or message that tries to get your code.

First, check that the alert is real

A real system alert appears on the lock screen or over the Home Screen, outside any app, and it opens Settings. A scam usually appears inside Safari, an app, a text message or an email, and it asks you to type your passcode or Apple Account password into a page. Never enter your passcode on a website. If the message links to a page, close it and open Settings by hand instead. For more on spotting these, see our guide to spotting scam texts.

The fix

Fix 1: Change your passcode to meet the rule

  1. 1

    Open Settings › Face ID & Passcode.

    On phones with Touch ID it is Touch ID & Passcode. Enter your current passcode.

  2. 2

    Tap Change Passcode.

    Enter your old passcode, then tap Passcode Options to see the choices.

  3. 3

    Pick a stronger option.

    Choose Custom Alphanumeric Code or a longer Custom Numeric Code, such as 8 digits or more, and avoid repeated or sequential numbers.

  4. 4

    Confirm it and check that the alert is gone.

    You may need to set up Face ID again if it was turned off.

If you do not remember your passcode, you cannot change it, and the fix is different. See our guide to resetting an iPhone without the passcode. Step-by-step instructions for the ordinary change are in how to change your iPhone password.

Fix 2: Look for a work or school email account

Open Settings › Mail › Accounts (on some versions Settings › Apps › Mail › Mail Accounts). Look for an account for a company, school or Exchange server. These accounts can send rules to the iPhone, including how long and how complex the passcode must be. If the account is yours and you need it, change your passcode as in Fix 1 so it meets the rule. If you no longer need it, tap the account and choose Delete Account. This removes the account from the phone, not from the service.

Fix 3: Check VPN & Device Management for a profile

Find and remove a profile you do not need

  1. 1

    Open Settings › General › VPN & Device Management.

    If you do not see this item, the iPhone has no profile installed.

  2. 2

    Tap the profile under Configuration Profile or Mobile Device Management.

    Read the name and what it says it manages. A passcode rule is often listed under Restrictions or Passcode Policy.

  3. 3

    Tap Remove Profile only if you know where it came from.

    Enter your passcode. Removing a work profile can remove work email, Wi-Fi and apps. If it came from your employer or school, ask your IT team first.

Fix 4: Check for beta software and update iOS

If you installed a beta profile, you may see extra prompts. In the same VPN & Device Management screen, look for an iOS Beta Software Profile. To leave the beta, remove the profile and wait for the next public update under Settings › General › Software Update. Also install the latest regular iOS. Prompts that come from a bug are often fixed in an update. If the phone misbehaves after the update, see iPhone problems after an update.

Fix 5: Check Apple Account and Screen Time prompts

Not every passcode prompt is about your lock screen code. Your iPhone may be asking for a Screen Time passcode, or for your Apple Account password. These are different. If you see Screen Time Passcode, the rule comes from Screen Time or a parent, not from a profile. If the alert says to confirm your Apple Account password, see our guide to an Apple ID that keeps asking for a password.

Fix 6: Restart, then test in a clean state

After you change the passcode or remove the account, restart the iPhone. If the alert still appears, remove the accounts and profiles one at a time and restart after each, so you can see which one sets the rule. If you cannot find any source and the alert keeps coming back, back up the phone and contact Apple Support, because it may be a bug or a hidden profile. Avoid downloading “passcode fixer” apps.

What makes a strong passcode on iPhone

  • Use at least 8 digits, or better, a custom alphanumeric code with letters and numbers.
  • Avoid birth years, repeated digits (1111) and sequences (1234).
  • Do not reuse a code you use for a bank card or another phone.
  • Keep Face ID or Touch ID on, so you rarely have to type it.
  • Write down a hint in a safe place in case you forget it, and know how to get back in if the phone is unavailable.

Face ID asks for the passcode more often now

A stricter passcode rule can also shorten how long Face ID is allowed between passcode entries. Some management profiles require the passcode every few hours. That is a policy, not a bug. If Face ID is failing for another reason, see our guide to Face ID that is not working.

What if I use my personal phone for work?

Many employers let you add work email to a personal iPhone, and in return they require a passcode. That is a fair deal, but it means the company controls the minimum. If you no longer work there, remove the account so the rule goes away. If you still do, keep the passcode strong and ask IT how long it must be. In some setups, they can also erase company data from your phone remotely, but not your photos or personal apps.

How a strong passcode protects you

A passcode is the key to more than your photos. It protects saved passwords, Apple Pay, Health data and, on many phones, your ability to change your Apple Account. If someone learns a short code, they can often reset things on the phone. A longer code takes far more guesses, and the escalating lockouts make guessing impractical. It is worth the few seconds to type, which Face ID takes off your hands most of the time.

Quick checklist

  • You confirmed the alert is a real system alert, not a web page or text.
  • You changed the passcode to a stronger code.
  • You checked work and school email accounts and removed ones you do not need.
  • You looked in VPN & Device Management and removed any profile you do not recognize.
  • You updated iOS and restarted the iPhone.

Frequently asked questions

Why does my iPhone say I must change my passcode?

An account or profile on the iPhone, such as work or school email or a management profile, has a passcode rule your current passcode does not meet. The alert keeps coming back until the passcode meets the rule or the account is removed.

Is the change your passcode alert a scam?

Not if it appears inside Settings or on the lock screen as a system alert. Be careful with a pop-up in Safari, an app or a text message that asks for your passcode, because those are scams.

How do I stop the passcode alert without changing my passcode?

Find what sets the rule. Check Settings › General › VPN & Device Management and your Mail accounts, then remove the profile or account if you no longer need it.

Will changing my passcode erase my iPhone?

No. Changing the passcode does not delete your data. It does turn off some features until you set up Face ID or Touch ID again, depending on your version.

What to try next

Share
Close-up of an iPhone home screen with app icons
iPhone

iPhone red dot on Phone app

iPhone red dot on Phone app that will not go away? Check voicemail, Deleted Messages and Recents, refresh your carrier count and turn off the badge.

6 min read
Show me the fix
Two iPhones sitting next to each other on a table
iPhone

iPhone stuck on Preparing to Transfer

iPhone stuck on preparing to transfer during setup? Learn how long to wait, what to check on both phones and how to use iCloud or a computer instead.

7 min read
Show me the fix
A person holding an iPhone that shows apps
iPhone

iPhone stuck on Update Requested

iPhone stuck on update requested and not downloading? Check Wi-Fi and storage, delete the update, reset network or update from a computer. 7 fixes.

7 min read
Show me the fix
Black and brown rotary phone near gray wall
iPhone

iPhone contacts missing

iPhone contacts missing or disappeared? Check your Lists, iCloud and Gmail sync, then restore contacts from iCloud.com or a backup. 7 ways to get them back.

5 min read
Show me the fix
A white cell phone with a blank screen
iPhone

iPhone white screen

iPhone screen turned white? Tell a software glitch from a hardware fault, force restart by model, use recovery mode to update without data loss, and know when to repair.

3 min read
Show me the fix
Iphone screen showing icons with icons
iPhone

iPhone Wi-Fi won’t turn on

iPhone Wi-Fi won’t turn on, greyed out or stuck off? Check Airplane Mode and Screen Time, reset network settings, update iOS and know when the chip is at fault.

6 min read
Show me the fix