Activation Lock check on a Mac: the 90-second verification before buying#

Activation Lock on any T2 chip Intel Mac (most 2018 through 2020 models) or any Apple Silicon Mac binds the device to the seller's Apple ID through Find My. If the seller has not disabled it before the sale, the new owner is locked out at first boot, after any erase, or after any macOS reinstall, and Apple Support cannot remove the lock without proof of original purchase. The verification itself takes about ninety seconds. Skipping it is the most common way a private-party Mac purchase becomes a total loss. The broader pre-owned Mac buying guide for 2026 sets up the two other provenance checks that pair with this one.

What Activation Lock actually does#

Activation Lock is the macOS analogue of the iPhone feature of the same name. When Find My Mac is turned on, the device's serial number is registered against the owner's Apple ID in Apple's activation servers. From that point on, the Mac will only complete the activation handshake at boot if it can reach a network and confirm that the Apple ID asking to activate it matches the registered owner, or if the registered owner has explicitly turned Find My off.

If a buyer takes ownership of the hardware without that release happening, the machine is functional but unusable. Setup Assistant will refuse to proceed past the language picker, instead showing a padlock screen that reads "This Mac is locked. Enter the Apple ID and password used to activate it." There is no recovery boot, no terminal trick, and no firmware reflash that bypasses it on a T2 or Apple Silicon Mac. The cryptographic binding lives in the Secure Enclave and is enforced at the hardware level.

The Mac will still power on. The screen still works. The keyboard still types. But the operating system will not progress, and nothing on the activation servers will let a different Apple ID claim the device.

Why Apple cannot quietly fix this for you#

The official remediation, on paper, is to contact Apple Support with proof of original purchase. In practice the bar is high. Apple needs the original retail sales receipt with the serial number visible, ideally in the requester's name. A third-party buyer who never bought the Mac from Apple has no realistic path through this channel. Apple's documentation is explicit that even with proof, the unlock is granted case-by-case.

This is by design. The whole point of Activation Lock is to make a stolen Mac worthless to a downstream buyer, which means the policy has to be biased against making it easy to unlock a locked machine.

The consequence, at scale, is that legitimate refurbishers have been forced to scrap large volumes of working hardware because nobody can clear the lock. Macworld documented one industry account at RDKL Inc. describing millions of functional Macs going to recycling for exactly this reason. The point is not that buyers should feel sorry for refurbishers; it is that the buyer who skips the Activation Lock check is taking on the same recycling-bin risk personally.

The check itself, in person#

The fastest verification is via System Information, which exposes the Activation Lock status as a Hardware property without requiring the seller's Apple ID password.

With macOS booted:

1. Hold Option and click the Apple menu in the top-left corner. The menu item normally labeled "About This Mac" changes to "System Information."
2. Choose System Information.
3. In the left sidebar, ensure Hardware is selected (it is the default top-level entry).
4. In the right pane, scroll to the bottom of the hardware summary. The final entry reads "Activation Lock Status."

The value must read Disabled. If it reads Enabled, the seller's Apple ID still owns the machine. Have them sign in to System Settings, their Apple ID, iCloud, then Find My Mac, and turn the toggle off. This will prompt for their Apple ID password. Re-check System Information; the value should flip to Disabled.

That is the minimum bar. If you cannot get Disabled in front of you, do not pay.

The cleaner version: Erase All Content and Settings#

The slightly more thorough path is to ask the seller to run Erase All Content and Settings (EACS), which is the macOS equivalent of the iPhone factory-reset that signs out of every Apple service, removes the Apple ID from the device, deletes user data, and reboots into the Setup Assistant. It is available on macOS Monterey and later, and only on T2 chip or Apple Silicon Macs.

To find it: System Settings, General, then Transfer or Reset. The Erase All Content and Settings button is at the bottom of that pane.

Watching this run gives you two pieces of information that the System Information check alone does not. First, the seller cannot complete EACS without entering their Apple ID password, which is itself proof they are signed in as the legitimate owner. Second, after the reboot, the machine boots to the Setup Assistant's "Hello" / language-picker screen, which is exactly what a brand-new or fully-released Mac looks like on power-up.

If, after the reboot, you instead see the padlock screen with "This Mac is locked," the EACS did not succeed at signing out of Find My. Either the seller did not actually own the machine (it is borrowed, or stolen, or company-owned), or there is something stuck in the activation state that they need to resolve before the sale. Either way, you do not complete the transaction.

What the two boot outcomes look like#

These are the only two outcomes you should accept from a power-on after EACS:

• Language picker / "Hello" screen. The Setup Assistant is offering you a list of languages and will walk you through a normal first-run setup. This is the clean state.
• Padlock with "This Mac is locked. Enter the Apple ID and password used to activate it." The machine is still bound to the previous owner. Do not pay. Do not "take it home and figure it out." Do not let the seller "send the password later." There is no later.

Anything else (an existing user-account login screen, a Remote Management screen for MDM-enrolled devices, a screen requesting an Apple Configurator profile) means the previous owner did not release the device properly, and the sale should not proceed in its current state.

The Remote Management variant is a related but distinct problem (Mobile Device Management enrollment via Apple Business Manager or School Manager) and has its own remediation path; the three-check MDM detection playbook for a used Mac covers it in detail. Activation Lock is the consumer-Find-My case.

Buying remotely#

Most of this protocol assumes you are physically with the seller. For remote purchases, the equivalent steps are:

1. Ask the seller for a screen recording that shows System Information with Activation Lock Status: Disabled, captured in the same recording as a visible chassis serial number.
2. Run that serial through checkcoverage.apple.com yourself to confirm model, age, and warranty status before paying. The complete 2026 walkthrough of Apple Coverage Check covers what each result state means, including the cases that look fine on the surface but flag a replaced or refurbished serial.
3. Pay via PayPal Goods and Services (180-day dispute window) or an eBay listing with Money Back Guarantee active. Friends and Family payments and Zelle waive all platform recourse, so neither is appropriate for a Mac purchase.
4. As soon as the machine arrives, boot it and re-run the System Information check before clicking "Confirm Received" or releasing escrowed funds. If anything is off, file the Not As Described claim immediately.

A remote seller who refuses the screen recording is functionally indistinguishable from a remote seller who is shipping a locked Mac, regardless of how their listing reads. For in-person C2C meetups, the Facebook Marketplace and Craigslist field protocol covers the rest of the inspection sequence.

A small nuance about signing out of Find My#

A seller does not strictly have to run Erase All Content and Settings to release the Mac. Signing out of Find My (System Settings, Apple ID, iCloud, Find My Mac, off) is sufficient to flip Activation Lock Status to Disabled. The Mac can be handed over with the seller's account still on it and a buyer can erase and reinstall macOS themselves without hitting the lock screen, as long as Find My was turned off first.

EACS is the cleaner path because it removes the Apple ID from the device entirely and resets the machine to a known-good first-boot state, which is also better for verifying that the keyboard, trackpad, display, and Wi-Fi all work correctly at Setup Assistant. But it is not the only valid release path; "Find My is off, confirmed in System Information" is a complete answer to the Activation Lock question.

What this means for a buyer#

Activation Lock is not the most common defect in a used Mac, but it is the most expensive one in the sense that no amount of money or paperwork after the fact will reliably resolve it. Battery degradation has a repair price. A "stage light" display has a repair price. A locked Mac does not have a repair price, because the part that needs to be fixed lives on Apple's servers and Apple is not going to fix it for you without documentation that, by definition, you do not have as a third-party buyer.

The two practical defenses are both ninety-second checks. Either you confirm Activation Lock Status: Disabled in System Information, or you watch the seller run Erase All Content and Settings to the language picker. Either is sufficient on its own. Neither is optional. A seller who pushes back on both is signaling that the machine is not actually theirs to sell in a clean state, which is the precise scenario the check exists to surface. For a buyer-side reference page that bundles the lock check into a pre-purchase workflow, see how to spot an Activation-Locked Mac before buying.