Activation Lock check on a Mac: how to verify it's off before buying#

Activation Lock on a Mac is enforced server-side by Apple's iCloud activation servers, and the only reliable pre-purchase evidence that it is disabled on a given Mac is observed boot state. There is no Apple-hosted public checker. There is no screenshot a seller can send that constitutes proof. The single check that holds up is an unbroken video of the seller running Erase All Content and Settings and the Mac reaching the Setup Assistant "Hello" screen with no Activation Lock prompt, with the buyer's marketplace username and the day's date visible in frame.

This post covers what Activation Lock actually is, the in-system indicator that matters, why every common alternative form of proof is not proof, and the exact video script that is. For the wider used-Mac verification stack, see what's inside a Macfax Basic report, which folds the boot-state evidence below into a signed report. The complete Activation Lock guide for any Mac covers why the binding survives an SSD wipe and the legitimate-removal escalation path.

What Activation Lock is, in one paragraph#

Activation Lock on a Mac triggers automatically when Find My Mac is enabled, which is the default on every Apple ID-bound Mac with Apple Silicon (M1, M2, M3, M4 family) or a T2 chip (most 2018-2020 Intel Macs). Once on, the device's hardware identifier is registered on Apple's iCloud activation servers as locked to a specific Apple ID. During Setup Assistant, the Mac contacts those servers; if it is still locked, Setup Assistant halts on an Activation Lock screen showing an obfuscated Apple ID hint (e.g., j••••@gmail.com) and the text "This Mac is linked to an Apple ID. Enter the Apple ID and password that were used to set up this Mac." There is no way to remove that lock without either the original Apple ID password or Apple-accepted proof of original purchase submitted at al-support.apple.com, which a second-hand buyer cannot provide.

That last sentence is the entire reason this check matters. If you skip it and the Mac arrives locked, you do not have a unit Apple Support can clear for you.

The one in-system indicator that counts#

On a powered-on Mac with macOS booted, the only authoritative in-system indicator of Activation Lock state is System Information's Hardware Overview pane. To reach it:

• GUI: Option-click the Apple menu and choose System Information (on Ventura and later, also reachable through Apple menu → About This Mac → More Info → System Report). Scroll the Hardware Overview pane to the bottom.

On every Apple Silicon Mac and every T2 Intel Mac, that pane displays a line labeled Activation Lock Status:, and the value is either Enabled or Disabled. This field is read from the live binding, not from a cached setting, so it tracks Apple's servers in real time.

This is the line that has to read Disabled before money changes hands. Note that this is in System Information, not in About This Mac's overview tab; the Hardware Overview pane is the one System Information shows by default when you Option-click the Apple menu.

What does not count as proof#

The seller will, in many cases, send one of the following instead of doing the work. None of them are evidence the Mac will boot unlocked on the buyer's side.

A Check Coverage screenshot showing "Activation Lock: Off"#

Apple's checkcoverage.apple.com page does not display an Activation Lock line for Macs. It shows warranty and AppleCare coverage status. Any screenshot purporting to show a green "Activation Lock: Off" badge on Check Coverage for a Mac is fabricated by definition; the field-by-field reference for the Apple Coverage Check response page covers every result the page actually returns. The broader forgery catalog used in fake unlock listings covers each variant.

A third-party Activation Lock checker result#

Apple retired the public iCloud Activation Lock status page in 2018. There is no Apple-hosted serial-to-lock-state lookup. Third-party sites still advertising "iCloud Activation Lock checker" services for Macs are at best scraping repair-flow rejection codes (which are unreliable, lag the actual server state, and never confirm an unlocked state with authority), and at worst fabricating output. Treat them as untrustworthy.

A "Find My is off" screenshot from the iCloud settings pane#

A seller can toggle Find My Mac off, screenshot it, toggle Find My Mac back on, and ship. The screenshot proves nothing about the device's state at the moment of erase or first boot.

A still of the Setup Assistant "Hello" screen#

A "Hello" screen photographed at a single moment is also recyclable from a prior sale. Without the buyer's username and the day's date in frame, the still is not unique to this transaction.

An Apple Configurator screenshot#

Apple Configurator does not display Activation Lock state as a green or red status field. A "Configurator screenshot showing the Mac is unlocked" is generally mis-framed or doctored. Configurator's Revive and Restore actions on a DFU-mode Mac do reinstall firmware and the recovery system, but they do not remove Activation Lock if Find My was on. A DFU restore demonstrated on video is therefore not proof of unlock either; the lock reappears as soon as the device reaches network configuration on the buyer's side.

A T2 Mac local-bypass demonstration#

On 2018-2020 Intel Macs with T2 chips, researchers have demonstrated unstable "fail-open" exploits against local Activation Lock state checks. By forcing an offline T2 Mac into Recovery and feeding crafted inputs to firmware-password or NVRAM prompts, attackers have caused the device to skip the activation check on boot and land on a user login window. These bypasses are unstable. The lock remains active on Apple's servers, and any macOS update, network reconnect, or restart can re-trigger the activation request. A scammer may use this trick to demo a "working" T2 Mac on a call, then ship a device that re-locks once the buyer connects to a real network.

Video-call deception#

The most elaborate version: during a live call, the seller briefly turns off Find My, performs Erase All Content and Settings on camera, reaches Setup Assistant, then ends the call. After the call, before packing, the seller signs back into iCloud and re-enables Find My; the device ships locked. The defense against this is to insist the erase and packing happen in the same continuous video, with the buyer's username and the day's date in frame throughout.

The unifying point is that only state observed by the buyer at first boot, on the buyer's own network, is fully reliable. Pre-purchase evidence is a question of how close you can get to that standard before money changes hands. The third-party "iCloud unlock" services that promise a shortcut around this are themselves the scam category.

The verifiable seller demonstration#

This is the script that gets as close as possible. It is one continuous unbroken video, no cuts, with the buyer's marketplace username and the day's date written on paper and visible in frame throughout.

1. Open System Settings → Apple ID → iCloud. Seller's own name and email are visible at the top of the pane. This establishes that the Apple ID the seller is about to sign out from is in fact the Apple ID currently bound to the Mac.
2. Toggle Find My Mac off. The seller enters their Apple ID password. This is the act that releases the binding on Apple's servers. The toggle has to flip to off on camera.
3. Open System Settings → General → Transfer or Reset → Erase All Content and Settings, and run it. This is the full reset that signs the Mac out of every Apple service, removes the Apple ID from the device, and reboots into Setup Assistant. The seller has to actually start the process, not just navigate to the panel.
4. Wait through the erase and reboot. The Mac comes up to the Setup Assistant "Hello" screen and proceeds through the language and region pickers. Critically: no Activation Lock prompt, no "This Mac is linked to an Apple ID" screen, appears anywhere in this stretch.
5. The paper stays in frame the whole time. Day's date in handwriting, buyer's marketplace username in handwriting, both legible. This prevents the seller from reusing a video from a previous sale.
6. Power off and pack on the same continuous video. The Mac goes from the Setup Assistant screen to powered off to inside the shipping box on one take. This closes the window in which the seller might sign back into iCloud and re-enable Find My between the proof and the shipment.

Step 4 is the actual proof. Setup Assistant physically cannot reach the language picker if the Mac is still locked. Reaching that screen is observable, verifiable evidence the server-side binding was released at the moment of erase.

The server-side companion check#

Alongside the boot-state video, ask the seller for a screenshot of account.apple.com → Devices showing that the Mac no longer appears in their device list. This is the server-side companion to the boot-state evidence: the Apple ID side now shows the Mac unbound. Combined, the two pieces of evidence are essentially impossible to fake.

A second optional screenshot, from icloud.com/find → All Devices, showing the same absence, further documents the unbinding.

What to do if the seller will not produce the video#

If a remote seller refuses to record the unbroken erase-and-Setup-Assistant video, the transaction is one-sided. The seller is asking the buyer to absorb all of the Activation Lock risk. The buyer's options at that point:

• Walk. This is the right answer in the majority of cases. Sellers who actually own and have signed out of the device have no reason to refuse a five-minute video.
• Insist on payment with full recourse. Pay via PayPal Goods & Services, eBay checkout, Facebook Marketplace checkout, or credit card. Significantly-Not-As-Described disputes for a locked Mac are generally winnable on these rails, given the Activation Lock screen photographs as direct evidence. Never pay via Zelle, Venmo, Cash App, PayPal Friends & Family, Apple Cash, or wire transfer for an unverified Mac. These rails have no buyer protection and are the rails scammers prefer for exactly that reason.
• Confirm the disposition before any modification. If the Mac arrives locked, do not attempt any third-party "unlock" service, do not run Apple Configurator restores, and do not modify the device in any way. Open the marketplace dispute immediately while the device is in its delivered state. Photograph the Activation Lock screen with the obfuscated email hint visible; if the hint matches anything in the seller's profile or username, that is direct evidence the seller did not sign out.

In-person purchases: the meetup version#

If the transaction is in person at a marketplace meetup, the verification compresses to roughly two minutes. With the Mac booted on the seller's account (or any account), Option-click the Apple menu, choose System Information, and scroll Hardware to the Activation Lock Status: line. If it reads Disabled, you can proceed. If it reads Enabled, ask the seller to open System Settings → Apple ID → iCloud → Find My Mac and toggle it off with their Apple ID password, then re-check System Information. It should now read Disabled.

The cleaner in-person version is the same Erase All Content and Settings flow described above, watched live: the seller runs the reset in front of you, and you stay through the reboot until the Mac reaches the Setup Assistant "Hello" screen with no lock prompt. That takes about ten minutes including the erase itself, and it is the version that survives the seller's Apple ID being re-enabled after you walk away.

What this means for the buyer#

Activation Lock verification is the highest-leverage step in the entire used-Mac purchase protocol because it is binary: either the Mac reaches the Setup Assistant "Hello" screen, or it does not. Skipping the check because the seller seems trustworthy is the single most common way a private-party Mac purchase becomes a total loss. The companion MacBook scams reference for the broader fraud landscape covers the patterns this check sits inside.

The exact form of evidence that counts is narrow: System Information's Activation Lock Status: Disabled line on a live powered-on Mac, plus an unbroken video of an Erase All Content and Settings reaching the Setup Assistant "Hello" screen with the buyer's username and day's date in frame. Everything else, including every form of screenshot, every Apple Configurator demonstration, every "Find My is off" still, and every Check Coverage page, is either fabricable or already known not to display Activation Lock state for Macs at all. Pay only on rails with recourse, in case the Mac arrives locked anyway, and never pay before reaching the Setup Assistant "Hello" screen on video.