Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
This is a huge problem for me. Supermarkets and such, and people in line next to you have always been risky with the stupid pins on cards, but this is a whole other level of risk. I won't do it. They can steal my debit card and good luck with that, but no way I'm going there with this
They won't steal my debit card unless they break into my house and find out where I have it hidden. Even if they do find it, its segregated from my main bank account.
 
To all people saying Face ID: Face ID doesn’t help here. Currently all biometrics can be bypassed if someone knows the passcode in iOS, and that’s what this article is all about.
You are missing the point. By using biometrics instead of a passcode, no one will be able to watch you enter your passcode.
 
The other ditz thing to do is to use banking apps on their iphone. Shopping apps are bad enough but your banking account? Ditz, ditzier, ditziest,
Without Banking apps on your phone, how do you deposit checks?
 
  • Like
Reactions: dk001
Doesn't really matter.
If the "thieves" are over the shoulder or videoing your passcode, even long ones are still at risk.
Or more likely if one is physically assaulted, etc. As the news of this becomes more prevalent I wouldn't be surprised if users of smartphones of all models started to be accosted more frequently.
 
Or more likely if one is physically assaulted, etc. As the news of this becomes more prevalent I wouldn't be surprised if users of smartphones of all models started to be accosted more frequently.
I agree. It's easy to demand a 6-digit passcode in a quick amount of time. It's harder to give a password" "okay, it's capital B, lowercase i, etc" lol
 
  • Like
Reactions: dk001 and I7guy
You’re going to shoot and potentially kill someone for nicking your phone? You live in a messed up world man.
Not just his phone, his whole digital life. In many states now, if someone tries to rob you with the assistance of a weapon, you are legally allowed to kill them. It's called "Stand your ground".
 
  • Like
Reactions: compwiz1202
There was another post in this long thread that summed it up nicely. They talked about how security of the iPhone has changed over the years--with the first iPhone having no passcode, then a 4-digit, then biometrics and 6-digit+.

I think were at a point where change needs to happen again as these devices literally hold your whole digital life in one way or another. They now hold everything like financials, baby pictures and family videos, documents, email, etc. Imagine losing all of that, with no way to get it back.

And I know soon we will have all of our IDs on our phones as well. It's just a matter of time as Apple has already partnered with several states.
 
Last edited:
  • Like
Reactions: dk001
You can also make sure the iPhone is not used as a wallet. Such as don’t use Apple Card, carry credit cards only, not debt cards that also can be used at a ATM. Majority of places you spend money take credit cards, no need of cash these days. Make sure financial sites are accessed using passwords not in you keychain. So if the iPhone is stolen either by brute force or clever pickpocket or drunk at a bar, nothing financially is at risk except cards that can be reported stolen.
How are physical cards more secure than Apple Pay? They seem less secure to me.
 
It's become common practice where I live to setup screen time local passcode and app limit every important app to 1 min. Then you have an extra security layer over Face ID. Also, with this scheme, you can prevent easy change of your Apple ID password.

It's very common to be robbed by bicycle or from the car window (heavy traffic), with the iPhone unlocked. The thieves manage to change our Apple ID while cycling full speed. Amazing. With Screentime, it's way more difficult.
Why not just close the window?
 
  • Like
Reactions: compwiz1202
This is why I disagree with the users on here who keep saying passcode is more secure and stop using Face ID if you don't want people to take your phone and point it at you, etc. Perhaps the passcode is technically more secure, but it is practically way less secure. Face ID is secure especially if you enable "attention required." Always use Face ID. Never enter your passcode in public unless you are sure no one is looking at your screen (and to be extra secure, that no camera overhead is looking down at you).

Apple is not innocent either. Somehow they think it makes the phone more secure to occasionally demand your passcode at the most inconvenient times. This is way less secure. I have been asked for the passcode while in public and I actually waited until I went to a private location before entering it. Ask for it every restart, fair. But if the phone has been on and there are no multiple failed Face ID attempts, DO NOT ask for the passcode.

I don't think they should make it an iPhone issue, because the same thing is true for Android phones, and even our laptops. But it is a good point to never enter a passcode or password while someone can be watching. This is why biometrics are way better especially in public.

Some people even on here keep saying it's more secure. Even if it is technically more secure, it is practically way less secure.

And iPhone occasionally asks for the passcode to unlock the phone at the most unfortunate times, even if you have done nothing to it to warrant this. Should just stick with asking for passcode 1. on restart, 2. on multiple Face ID attempts, and 3. user manually disables Face ID through a combined button press gesture.

While I don't have time to read this entire 27 page topic, everything you have said in these posts is in complete alignment with my own school of thought. Face ID has made it so I can use a much longer, more complex passcode for security while still being able to conveniently access/unlock my iPhone throughout the day.

LOL re that video with the world's longest PIN, and though I couldn't count how many digits that user pressed, my own is a 27 character passcode consisting of upper and lower case letters, numbers, and symbols. It's certainly inconvenient to have to enter it while sitting at a red light because I glanced at the iPhone with RayBans on and FaceID became disabled. It should disable only for the reasons you stated in the last quote. (Number 3 is a must-have if ever faced with the likelihood of phone confiscation.)
 
Or more likely if one is physically assaulted, etc. As the news of this becomes more prevalent I wouldn't be surprised if users of smartphones of all models started to be accosted more frequently.

For the physically assaulted and intimidated, yes.

From this, it would not surprise me to see a spike in assaults - amateur hour.
 
Last edited:
Physical cards are limited to just that one account. They are not in control of your digital life nor drain additional accounts.
An individual card in Apple Pay is only connected to one account. Also, with Apple Pay, you can just register the card with an Apple Watch which can have a different pin.

The biggest problem with physical cards is they come with the card number printed on them along with your signature and a short security code. I have cards at home that are locked away and never leave the house. I only access them via Apple Pay or via recurring charges such as phone and cable bills. The only cards I have ever seen fraud with are the ones I carry in my physical wallet.
 
An individual card in Apple Pay is only connected to one account. Also, with Apple Pay, you can just register the card with an Apple Watch which can have a different pin.

The biggest problem with physical cards is they come with the card number printed on them along with your signature and a short security code. I have cards at home that are locked away and never leave the house. I only access them via Apple Pay or via recurring charges such as phone and cable bills. The only cards I have ever seen fraud with are the ones I carry in my physical wallet.
The Apple card doesn't ave any numbers on it. Just the name.
 
An individual card in Apple Pay is only connected to one account. Also, with Apple Pay, you can just register the card with an Apple Watch which can have a different pin.

The biggest problem with physical cards is they come with the card number printed on them along with your signature and a short security code. I have cards at home that are locked away and never leave the house. I only access them via Apple Pay or via recurring charges such as phone and cable bills. The only cards I have ever seen fraud with are the ones I carry in my physical wallet.

Not exactly.
I have three cards linked to AP. Aside from that I also have most of my financial stuff via app or web page and guess where those passwords are keychained.

So yeah, if a thief got my passcode and phone, Screentime or not, they could do some serious damage rather quickly.

While I figure out a way to better safeguard this, I suppose the fact I mostly take my Android with me instead of my iPhone is a plus.
 
The Apple card doesn't ave any numbers on it. Just the name.
I am aware, it also only gives you 1% cash back if you use the physical card so that is one of the cards I have locked away. Every other credit card or debit card I have has the number on the card. The physical card I use most frequently gets compromised about once every 12 months.
 
While I don't have time to read this entire 27 page topic, everything you have said in these posts is in complete alignment with my own school of thought. Face ID has made it so I can use a much longer, more complex passcode for security while still being able to conveniently access/unlock my iPhone throughout the day.

LOL re that video with the world's longest PIN, and though I couldn't count how many digits that user pressed, my own is a 27 character passcode consisting of upper and lower case letters, numbers, and symbols. It's certainly inconvenient to have to enter it while sitting at a red light because I glanced at the iPhone with RayBans on and FaceID became disabled. It should disable only for the reasons you stated in the last quote. (Number 3 is a must-have if ever faced with the likelihood of phone confiscation.)

A problem could potential be cameras in places where you would be using it. LOTS of cameras.

Ya Neva know LOL.

But the Apple Watch idea with a separate passcode is cool. I'm going to try that.
 
How is this glance / duress proof?
It's not glance proof. It's more difficult than 4 digits.

Bank of America - and others - used to require 13+ digit alphanumeric passcodes on BlackBerry devices.
Let's go back to that - with privacy screens.

Or better yet, let's not go to LGBTQ+ bars (yes, that was Joanna Stern's universe of compromised users - FACT) and get drunk whilst using our phones.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.