Yikes! Yeah I’d say that’s cause for concern. Perhaps the email address you are using as your primary username for your iCloud account has been compromised in a data breach somewhere.
You could try removing that email address from your iCloud account and using a different/new one, one that is very unlikely to be known on the internet. That would most certainly solve that problem.
You should also check to make sure you don’t have any old devices trying to access your iCloud account with an old password, that could also cause that problem.
Yeah i understand however … are we sure its a breach or fraud. Not changing any apple ID before i am 1000% certain.
the thing is … this mailing issue was already known as an issue with this app before ( older versions ) . Restarting homey is causing the login notification also because of the app login with apple.
I am Pretty sure that when you remove the app … the issue is gone . For me it started again THE MINUTE i had installed the 1.7.0 version of the app. Before that i did not have the issue for a looong time. I also reported this to the dev when i installed 1.7.0
it will be a huge coincidence that my account is spammed by others .. the minute i installed 1.7.0.
Check trail above .. the last time i had the issue it was in november 2024 … and was solved after an update from the dev ( starting post 241 ish )
In the end Martijn wrote “@Dennis_H74 updated to 1.5.2
I saw in your latest log that there was a duplicated findmy instance, made a fix for that. hopefully that resolves the email issue.”
That’s expected behaviour, when restarting your Homey or restarting the Find My app, as it is actually re-authenticating. You are also likely to get periodic emails (I get 1 or 2 a week) when Apple times out third-party authentications, forcing a re-authentication.
What’s not normal is 4 emails per hour, that definitely doesn’t sound like the app… if you are running the latest version the same as I am, it should behave no differently. Which strongly suggests either an old device of yours trying to connect with out of date credentials (say over WiFi). Or a bot trying a Denial of Service attack on your account.
Either that or you have a Flow somewhere that is using the “Update device data” Then card:
And is polling the server way too often.
I honestly can’t think of anything else to check or try. I am running the version 1.7.0 app and apart from my account getting locked (which was most likely a bot) it has been rock solid stable for about a month now. Version 1.7.0 solved all my previous authentication issues. I’m fairly stumped for more ideas to be honest.
I’ve been checking mine regularly since the account lock out, and I haven’t had any stray authentication emails, and for the most part it has been working solidly. I have noticed that sometimes it updates and the information that Apple sends is a little out of date. For example:
My iPhone battery had been on charge and at 78% for several minutes, but the few seconds ago update from Apple said 77%. Small and fairly insignificant I know, but it does point out that sometimes the data sent from Apple isn’t always accurate or up to date.
I hope you do manage to resolve your issues and get it working as you want, and sorry I couldn’t think of a suggestion that helped.
i do not have that card in use. I did an edit on my previous post. Not sure if u did see that. It reffers to older posts ( also then not everybody had the issue )
I do not have an old device active.
My wife has the same issue by the way … on her own apple id ( even more emails per hour ) … started after 1.7.0 update also
Weird stuff … can make a mail rule but would rather not move account warnings .. in case i have a real one
I have had NO icloud email AT ALL after i switched off the app in homey. None … zero. Neither has my wife. Nothing for the past 12 hours. Stopped spamming the minute i switched off the app and its flows.
So its save to say
this has nothing to do with a hack or someone pinging my icloud account
This has nothing to do with an old device trying to login on my apple id
A simple switch off of the app removed the email flood.
Will turn it on again and see what happens
-edit- : after switching all on .. phone of my wife did update.. mine did not. Another restart of the app did solve .. can not understand why though
@Dennis_H74 could it be your having more than one Apple device, or perhaps one of your Flows that is causing the problem?
@martijnpoppen is there a way to change the Server request interval for a specific device, so if you have more than the one iPhone/iPad you could say for example set the interval for one device to the “off” setting? Likewise for the Location tracking and Update device data? It seems to me they would be a lot more useful if they weren’t global settings, but device settings… unless it’s for some reason I’m unaware of, in which case please correct/enlighten me.
Thats all. If that is causing an email spam … something is off. Nothing else is using the app .. see screenshot i placed before. The flows are very simple.
I have received 3 new apple mails since all is switched on. So something in the app is the cause. Again i do not have many devices or many or complex flows
No as the device call is a combined call. There’s no individual call per device. Thats how apple does it. So it’s only a getall. So putting it on device level will do the same call many times and would only create more calls than less
@Dennis_H74 you know that the email spam is a known issue and has been there since the beginning of the app, we talked about it many times, but there’s nothing i can do about that. If the session is not kept alive there will be a new login.
I can check if somebody made a update to a sdk somewhere, but i doubt it
That’s kinda short sighted of Apple… so if you have an Apple mad household with many many devices, to update one you have to pull down all the data for all devices every time. How wasteful Apple
@Drako74 well you can, but first you need to call the global call before you can do a single call. As i didn’t want to overload API calls i chose to only implement the getAll
@martijnpoppen for changing the Server Update Interval and enabling/disabling device tracking, you’re not going to do that very often at all (unless you’re utterly crazy ) so could they not use the extra API call, that wouldn’t overwhelm it would it?
(apologies for all the questions, I’m just curious… It doesn’t actually impact me at present, as I currently only have the one iPhone, though I might get a watch and iPad in the future)
@Drako74 if you connect 8 devices it would create 8 extra API calls which can be all set at a differen server interval. I think it’s not about overwhelming, but tthe session logic and the chance of being locked out
Yeah I’d say that’s cause for concern. Perhaps the email address you are using as your primary username for your iCloud account has been compromised in a data breach somewhere.
… my wife is on 1.7.0 .. same thing.
