The lowest-friction secure floor for someone who isn't technical: an Apple device and an Apple ID.
This is lived testimony, not an endorsement. I've been online since around 1993. I've cleaned countless Windows machines for clients since 2004. I've been locked out of Google, banks, hosts, registrars, SIM cards, and phone numbers — and rebuilt from scratch more times than I can count. Three years ago I switched to Apple-only. I stopped having to rebuild.
Why Apple sits at the top of the trust stack
- No credit card to create an Apple ID. You don't owe them money on day one. You don't have a payment instrument they can hold hostage.
- Real human support, by callback. You schedule a call. A person calls you back. Google has no equivalent. Microsoft's is hours on hold. This alone is the difference between "locked out forever" and "locked out for an afternoon".
- Hardware-bound passkeys by default. The thing that proves you're you lives in a chip on your device, not on a server somewhere. Phishing-resistant. Theft-resistant.
- Sandboxing. One bad app can't drain the device or read every other app's data. On Windows, one bad install can end your day.
- Quiet defaults. The device doesn't fight you to update, to back up, to find a lost phone, or to switch to a new one. For a non-technical person, "quiet" is the same word as "secure".
The honest caveats
- Apple is not bulletproof. Their support can still close an Apple ID. People still lose access.
- Apple is more expensive up front. The total cost over five years is usually lower — fewer rebuilds, longer device life — but the first cheque is bigger.
- Apple has its own opinions about what you can install. If you need full control of your machine, you'll feel them.
- Apple is not a charity. They are a company. We recommend them because the floor is higher, not because they're saints.
The setup, in order
- A device with a Secure Enclave — any current iPhone, iPad, or Mac. A used one is fine. A hand-me-down is fine.
- An Apple ID with no credit card attached. You can add one later for paid apps. Skip it now.
- Turn on iCloud backup. That one switch saves a year of photos and a lifetime of contacts when the device dies.
- Set up a Recovery Contact. A family member or trusted friend whose own Apple ID can help you back in if you're locked out. This is the human path that Google does not have.
- Set up two trusted phone numbers. Your own and one other. Not both on the same SIM.
- Save your Recovery Key on paper. Print it. Put it where you keep your passport. Do not store the only copy on the device it's recovering.
- Get a VID at upgradeai.net. The Apple ID is your device floor. The VID is your network floor. Different jobs, both required.
If you're on Android or Windows
You are still welcome in the network. You still get verified. We're not gatekeeping. We're telling you the truth about which floor is higher. If you can switch, switch. If you can't, get a Recovery Contact set up on whatever you have, print your recovery codes, and use a hardware security key (YubiKey or similar) for the accounts that matter most.
Why this page exists
Because the question "what should I buy?" is the first one I get from people who've just been locked out, and the worst time to answer it is at 2am after their email vanished. So here it is, written once, in daylight, for the grandmother and the kid: get an Apple device, get an Apple ID, set up a Recovery Contact, get a VID.You will not be bulletproof. You will be harder to wipe off the map than 95% of people online.