Tell HN: Lost access to my Apple account even though I have the password

I'm trying to access my Apple account for the first time in years. I have the email and password in my password manager, but apparently Apple recently got 2 factor authentication mandatory. Problem is, right now, the second factor is security questions to which I don't have the answers (I probably entered random gibberish years ago).

I tried to reset them, but Apple asks me for at least one answer to a security question. I got on a chat with the support, and they can't do anything, except telling me to create another account.

I therefore lost access to everything I "bought" on iTunes and the App Store even if I have the correct login and password for my account.

How is this acceptable ? Of course, the support told me that my data is secure ... so secure I cannot access it !

It may be difficult since this is a classic way to take over an account through phishing and they have been trying to block that kind of thing.

I hate those security questions because, if you answer with real data, it can be guessed by others. If you answer with gibberish, then you need to document your answers and store them like passwords.

If you answer security questions honestly, you're very vulnerable to account takeover. Most of the answers are public information about a person (where did you grow up kind of thing), or so arbitrary I wouldn't remember what I answered anyway (what's your favorite movie/food/etc).

The best strategy I've found is to answer them with random passphrases, and store the answer in my password manager.

Passphrases are important because you want it to be words you can speak over the phone. It's often customer-service who will ask.

Well, this is kind of the point. You may or may not remember that mere weeks before Apple rather forcefully encouraged people to set up 2FA, numerous female celebrities had their accounts breached and rather personal images leaked to the world.

When you were prompted to set up 2FA, you were given warnings (on multiple screens, no less) that no-one can help you recover the account if you lose the details. I believe there was also a single chance to save recovery codes, though I'm not sure if the process has changed in the time that has since passed.

This one's on you. Apple support aren't going to get you back in to an account for which you cannot provide the security answers. Those were your proof that you are indeed you.