An image forming apparatus includes an activator, a command storage device and a controller. The activator activates a customer ID received by a UI, out of customer IDs stored in a customer ID storage device. The command storage device stores the activated customer ID in association with command information received by the UI. The controller changes a function setting of the image forming apparatus, according to the command information received from an external device, despite a security level being set to a high level, when function information included in the command information received from the external device via a communication device accords with the function information included in changeable command information stored in the command storage device.