Mac User Account Locked? Here's How to Get Back In

You sit down at your Mac, type your password, and the field shakes — wrong password. You try again. Wrong again. The message changes: “Your account is locked. You will be able to try again in minutes.” Or in some scenarios, “If you continue to enter the wrong password, your data will be erased.” That last one is FileVault telling you to slow down.

Lockouts on macOS come in three flavors, and each has a different fix. Knowing which lockout you’ve got saves you from doing something destructive.

The three Mac lockout types

1. Failed-password lockout (most common)

Too many wrong password attempts trigger an enforced wait. Texts you might see:

• “Your account is locked. You will be able to try again in minutes.”
• “Try again in minutes.”
• “Too many failed login attempts.”

This is a temporary lockout. Wait the stated time and try again. The lockout duration grows with each lockout cycle: typically 1 minute, 5 minutes, 15 minutes, 60 minutes.

2. FileVault recovery threshold

If FileVault is on and you fail too many times, you’ll see something like:

• “If you don’t know your password, click the question mark in the password field.”
• A prompt offering recovery via Apple ID or recovery key.

This isn’t a lockout — it’s macOS offering you a recovery path. Use it if you’ve genuinely forgotten the password.

3. Account-disabled lockout

An admin user has disabled your account. You’ll see:

• “You are unable to log in to the user account [user] at this time.”
• “Account is disabled.”

This is administrative, not transient. You need an admin user to re-enable.

Quick fixes to try first

1. Wait out the lockout

If the message gives a time, wait it. Your password is fine; you typed it wrong too many times. Set a timer, walk away, come back, log in.

2. Check Caps Lock and the keyboard

The login screen indicator for Caps Lock is subtle. Verify it’s off. If you’ve recently switched keyboard layouts, ensure the active input is what you expect — the input source indicator is in the top-right of the login screen on most macOS versions.

3. Type the password into the username field temporarily

Old debugging trick: type your password into the visible username field, then move it to the password field. This confirms what’s actually being typed, including layout-dependent characters.

4. Restart the Mac

Sometimes a system glitch keeps the lockout active beyond the stated time. Restart and try again.

Don’t reinstall macOS yetSweep clears the buildup that’s actually causing the issue. Free for macOS →

Reset the password if you’ve actually forgotten it

Apple offers four official password reset paths. They’re listed below from least to most invasive.

Path 1: Apple ID reset

Available if your account is linked to your Apple ID and you have internet access at the login screen.

1. At the login screen, click the ? (question mark) icon in the password field, or click “Reset using Apple ID” if it appears.
2. Sign in with your Apple ID.
3. Authenticate via two-factor on a trusted device.
4. Set a new password.

Your data is preserved. Your old keychain might require its old password (see the Keychain section below).

Path 2: Another admin user

If you have a second admin account on the Mac:

1. Log in as the other admin.
2. System Settings → Users & Groups → click the (i) next to the locked account → Reset Password.
3. Set a new password.
4. Log out, log in as the original user.

Path 3: FileVault recovery key

Available if FileVault is on and you saved the recovery key (or stored it in iCloud).

1. At the FileVault login screen, click the recovery option.
2. Enter the 24-character recovery key.
3. Set a new password.

The recovery key is generated when you turn FileVault on. If you stored it in iCloud, sign in to appleid.apple.com from another device to retrieve it.

Path 4: Recovery Mode reset

If none of the above work:

1. Shut down the Mac completely.
2. Apple Silicon: Press and hold the power button until “Loading startup options” appears. Choose Options → Continue.
3. Intel: Hold Cmd+R during boot.
4. From the menu bar, choose Utilities → Terminal.
5. Type resetpassword and press Enter.
6. Follow the prompts.

This bypasses the locked account but requires you to authenticate via Apple ID, FileVault recovery key, or a separate admin password — there is no backdoor.

When the account is administratively disabled

If another admin disabled the account intentionally:

1. That admin must log in.
2. System Settings → Users & Groups → click (i) next to the disabled account → there will be an “Allow this user to log in” toggle. Enable it.

If the disabling admin is unavailable (e.g., a former employee on a work Mac), your IT team needs to handle it. On a personal Mac, you may need to reset via Recovery Mode.

Skip the manual huntSweep clears the cruft that triggers most of these errors — caches, logs, leftover daemons. Download Sweep free →

Specific scenarios

”You are unable to log in to the user account at this time”

Often a permissions problem on the user’s home folder, not a true account lockout. From an admin account or single-user mode:

sudo chown -R username:staff /Users/username
sudo chmod -R 755 /Users/username

Replace username with the actual short username. Restart, try logging in again.

Login loop — accepts password, then bounces back to login screen

The password works but something in the user’s session crashes. From another admin account:

1. Move the user’s broken cache: mv /Users/username/Library/Caches /Users/username/Library/Caches.OLD.
2. Move broken Saved Application State: mv /Users/username/Library/Saved\ Application\ State /Users/username/Library/Saved\ Application\ State.OLD.
3. Try logging in as that user.

If that works, gradually move pieces back to find the offender.

”Account is locked” repeatedly without enough failed attempts

Your account password may have been changed without you knowing — common on shared Macs. Reset via Apple ID or another admin.

If this is a work Mac with mobile accounts (managed by Active Directory or a similar directory), the directory server may be locking you out. Talk to IT.

Touch ID or Face ID stops working

Touch ID has its own lockout. After a few wrong fingerprint attempts, it disables and requires the password. After a restart, it disables for the first login regardless. After 48 hours of not unlocking, ditto. None of these are bugs — they’re security features. Just type the password.

What happens to your data?

A password reset preserves your files. The user folder, documents, photos — all stay on disk. What you may lose:

• Login keychain access unless you remember the old password to update it. Saved passwords for apps and websites in the local keychain become unreachable. iCloud Keychain entries sync back fine.
• Encrypted DMG files that were encrypted using your old account password.
• FileVault key if you reset via Recovery Mode without a recovery key — but this requires explicit confirmation; you can’t accidentally do it.

Pre-reset checklist:

1. If you have iCloud Keychain enabled on another device, your most-used passwords are safe.
2. Note any encrypted DMGs you maintain — those passwords are independent.
3. If FileVault is on, locate your recovery key first.

When the lockout is FileVault encryption

If FileVault is active and the system can’t decrypt your home folder, the boot can fail to even reach the login screen. Symptoms:

• Apple logo with progress bar that never fills.
• Boot to a recovery screen with “FileVault is unable to decrypt your data.”

Use Recovery Mode → Disk Utility → run First Aid on the volume. If First Aid can’t repair, your only path is restoring from a Time Machine backup or starting fresh. This is rare but real, and it’s why Time Machine matters.

When to call Apple

Apple Support is the right call when:

• You’ve forgotten both your password and your Apple ID password.
• You don’t have a FileVault recovery key and FileVault is on.
• The Mac is paired to an Apple ID belonging to someone you can’t reach (deceased family member, former owner who didn’t sign out).
• Recovery Mode itself won’t load.

Apple has account recovery procedures for legitimate cases. They take days, sometimes weeks, and require proof of ownership. There’s no shortcut.

Prevent future lockouts

• Enable iCloud Keychain so saved passwords sync across devices.
• Save your FileVault recovery key in your password manager AND a physical location (printed, locked drawer).
• Keep at least two admin accounts on the Mac if it’s shared.
• Don’t change your password to something you’ll forget under pressure.

A locked account is alarming but rarely catastrophic. The four reset paths Apple offers cover most cases. The only truly destructive scenario is FileVault on with no recovery key and no Apple ID — and that’s preventable today by making sure both safeties are in place.