Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

MacRumors

macrumors bot
Original poster
Apr 12, 2001
67,464
37,699


Apple has quite a few security features that it's added to iPhones, iPads, and Macs over the years. Now more than ever, it's important to make sure you're taking advantage of the built-in security tools that are available to keep yourself and your data safe, so we've rounded up a list of the most important options.

iPhone-Security-Feature-25.jpg

If you don't already have these enabled, you might want to consider turning some of them on.
Two-Factor Authentication

With two-factor authentication, you need to verify your identify when you sign into iCloud on a new device or on the web. It works by sending a six-digit code to a device where you're already signed in, and it won't authorize a sign-in on the new device unless you input that code from your existing device.

two-factor-authentication.jpg

If you have an iPhone and want to sign into your iCloud account on your Mac, for example, when you enter your Apple Account name and password, you'll get a pop-up on your iPhone with a code that you input for identity verification. Alternatively, you can set a trusted phone number where you can also get a code in case you forget your password.

Apple tries really hard to get people to use two-factor authentication, so chances are you have it enabled, but if you don't, it's a first line of defense to protect your data. There are even some iOS features that don't work without it.

You can manage two-factor authentication by going to Settings > Sign-In and Security.

Security Keys

For an extra layer of protection with two-factor authentication, you can add physical security keys, such as the YubiKey. With a security key set up, you verify your identity with a physical dongle via USB-C or NFC.

Security keys make sure no one can break into your account even if they have access to one of your trusted devices, but you definitely don't want to lose a security key. You can set this up in the two-factor authentication section of the Settings app.

Stolen Device Protection

Stolen Device Protection is a feature that Apple added after criminals got clever and started watching people enter their passcodes before stealing an iPhone.

ios-17-4-stolen-device-protection.jpg

When you turn on Stolen Device Protection, a passcode won't work for accessing sensitive information like passwords and credit card data. Instead, Face ID or Touch ID biometric authentication is required, so if a thief has your iPhone and your passcode, they won't be able to get into your accounts.

There's also a security delay that keeps your Apple Account password from being changed without two instances of biometric authentication and an hour-long delay.

Thieves are blocked from accessing passwords, making purchases, turning off Lost Mode on an iPhone, applying for an Apple Card, using an iPhone to set up a new device, and accessing credit cards and Apple Cash. There are delays for signing out of an Apple Account, changing a password, resetting settings, and turning off Stolen Device Protection.

By default, Stolen Device Protection is only on when you're away from familiar locations like your home or your work, but if you want it on at all times, you just need to change the toggle to Always.

You can get to the Stolen Device Protection settings by opening up the Settings app, going to the Face ID and Passcode section, and tapping on Stolen Device Protection.

Private Relay

Private Relay is more of a privacy feature than a security feature, but it's something that you should have on. It hides your IP address and browsing activity in Safari and protects unencrypted internet traffic so no one can see what you're doing even if you're on an unsecured network.

icloud-private-relay.jpg

Private Relay is an iCloud+ feature that you get access to as long as you pay Apple at least $0.99 a month for 50GB of iCloud Storage, and it's well worth it. You should also take advantage of Hide My Email whenever possible, as it will give you temporary email addresses that you can revoke at any time.

Private Relay can be enabled by opening up Settings, tapping on your profile picture, and tapping on the iCloud section.

Advanced Data Protection

By default, some of the data that's saved in iCloud backups and uploaded to iCloud is not end-to-end encrypted, which means that Apple can provide iCloud backup data to law enforcement.

Apple-advanced-security-Advanced-Data-Protection_screen-Feature-Orange.jpg

Advanced Data Protection encrypts your iCloud data so that it cannot be decrypted except for on your personal devices signed into your Apple Account. It is Apple's highest security option for cloud data.

The feature protects device backups, Messages backups, iCloud Drive files, Notes, Photos, Reminders, Safari bookmarks, Siri Shortcuts, Voice Memos, and Wallet Passes, all of which can otherwise be accessed in iCloud backups by subpoena.

Advanced Data Protection is a good idea to turn on, but keep in mind that it means even Apple can't recover your data if a password is lost. To use Advanced Data Protection, Apple requires you to have a recovery key saved or a recovery contact set up as a way to regain access to your account should you lose your password.

You can get to Advanced Data Protection by opening up the Settings app, tapping on your profile picture, selecting iCloud, and then scrolling down to the Advanced Data Protection section. You can also turn it on in the Privacy and Security section of the Settings app.

Lockdown Mode

Lockdown Mode is an extreme security option that most people won't want to turn on, but it's good to know where it is in case you need it.

Lockdown-Mode-Feature.jpg

Apple designed this feature for journalists, activists, government employees, and others who might be in danger of being subject to sophisticated cyber attacks and mercenary spyware.

Lockdown Mode disables a lot of iPhone features, blocking Message attachments, web technologies like JIT (just-in-time JavaScript compilation), FaceTime calls from unknown contacts, shared albums in the Photos app, invites for Apple services from unknown people, physical device connections, and configuration profiles.

It essentially removes commo... Click here to read rest of article

Article Link: Five iPhone Security Features You Should Be Using
 
  • Like
Reactions: gusmula and Fll01
Two factor authentication is amazing however it is a double edged sword.

I had to change my number awhile back due to it being posted on some shady adult websites and had pervs messaging me.

Anyway the number was changed and updated it under email and phone numbers in settings. I didn’t think much of it.



When I got my iPhone 16 pro max, I had deleted my old iPhone and had given it to someone else and I tried to set up the iPhone 16 with my Apple account and I couldn’t bc while I changed the number I had forgotten to update it in the 2 factor authentication as well thus it was still trying to contact my old phone number and I didn’t have any other devices that I could access my iCloud.

So I literally couldn’t access my iCloud for nearly a month. It was a nightmare lol.

So be warned to always make sure it’s up to date.
 
Stolen device protection hit me just the other day -- AT HOME. WTF, Apple? Confirmed setting was set to "away from familiar places".
 
What if you factory restart your iPad to sell to someone, and they take it, but fake the payment transfer. How do you track that one back down?

…asking for a friend 🥹
I’ve sold a many of devices. You should always make sure payment is complete before selling anything.

When I’ve sold devices I’ve always waited until the person is there in person and then delete.

And if you’re selling online just make sure you’re paid before shipping.

Stolen device protection hit me just the other day -- AT HOME. WTF, Apple? Confirmed setting was set to "away from familiar places".
Yeah that’s Been an issue for me as well. I’m like whole I’m literally home. The same place I always am every night or it’ll be work where I’m at 6 days a week for like 10 hours lmao
 
What if you factory restart your iPad to sell to someone, and they take it, but fake the payment transfer. How do you track that one back down?

…asking for a friend 🥹

You don't give them the device unless you've verified the payment.

Think about the reverse situation - sell someone a device and then track it and steal it back or stalk the seller. Not good.
 
Are we any closer to an iPhone that no longer requires passwords to access apps? It was a hot topic a while ago when Face ID was introduced but seems to have gone quiet.
 
  • Wow
Reactions: HighwaySnowman
Well I at least have been using two-factor authentication and Advanced Data Protection. I haven't been using Private Relay but I think I will the few times I'm using a public wifi hotspot. I don't want the hassle of some websites forcing extra steps because they don't recognize my home IP address.

I don't see a big need for the hassle of stolen device protection. I rarely enter my passcode for someone to happen to see. I tried it for a bit but there are situations now and then where Face ID doesn't work as well and I want the easy fallback of entering my passcode.
 
One big thing to point out about Advanced Data Protection:
You can NOT have any old devices singed into your account!
IMG_5219.png

It makes sense and it also explains why I had a recovery contact set up but the feature itself turned off, I can’t follow through. At least the old SE can not be removed as it’s my backup phone. Interesting that my „obsolete“ 2017 MBP isn’t listed.
This is unfortunately pretty useless for many (especially Apple fans).
 
Well I at least have been using two-factor authentication and Advanced Data Protection. I haven't been using Private Relay but I think I will the few times I'm using a public wifi hotspot. I don't want the hassle of some websites forcing extra steps because they don't recognize my home IP address.

I don't see a big need for the hassle of stolen device protection. I rarely enter my passcode for someone to happen to see. I tried it for a bit but there are situations now and then where Face ID doesn't work as well and I want the easy fallback of entering my passcode.
I recommend just trying Private Relay. It works without any flaws for me in that regard.
 
Last edited:
It would be nice to have two forms of authentication at the same time, Face ID and passcode or iCloud password.:rolleyes:
 
Are we any closer to an iPhone that no longer requires passwords to access apps? It was a hot topic a while ago when Face ID was introduced but seems to have gone quiet.
I don’t have a single app that doesn’t work with a passcode but without Face ID (except for PayPal that refuses to work for literal years across all my iPhones). Maybe it’s the app devs fault?
 
  • Like
Reactions: Tagbert
Good article about the options available. In addition one can set up apps for required Face ID. Also enter a screen time password and protect settings like location, passwords, find my, etc.
 
  • Like
Reactions: Jay Tee
Beware of yubikey and iOS. Apple broke the NFC functionality last November and I couldn't get into anything for a few days (iCloud, password manager etc). Total nightmare. They need to be forced if necessary to open up NFC completely and at this point even if they do, I don't trust them. Moved my daily driver to a S24U and then S25U and my 16 PM is backup. I have to be able to rely on my security tech- Apple wasn't up to the task because apparently no one in Cupertino uses physical security keys. Apple blamed yubikey FWIW, though nothing changed on the physical key 🤔😑😒🤬🙄 so ridiculous
 
Last edited:
Having lost my business partner of 25 years recently (who operated company vendor accounts on a locked, encrypted iPhone, or internet services with 2FA enabled to verify via his locked iPhone), another security feature you should list here is Legacy Contact, which allows a designated Contact (preferably a trusted relative or your executor) to unlock your Apple accounts and your devices after your death.
 
Unlike other vendors, turning on Apple two factor is a one way street after two weeks you can’t turn it off.
Very annoying this one. When I decoupled from iCloud I found this out the hard way. I wanted to keep my mail and a handful of other iCloud services but their non-standard MFA is atrocious. They should make allowance for MFA code apps. And if they do, I couldn't find how to do it. This non-standard BS is annoying
 
  • Like
Reactions: gusmula
I think its a little ridiculous that the article says "If you don't already have these enabled, you might want to consider turning some of them on." and then lists Two-Factor Authentication first.

At this point, if you don't have Two-Factor Authentication enabled, it's because you have done your absolute best to avoid those sneaky persistent attempts by Apple to get you to enable it via endless prompts and changing notifications.
 
What if you factory restart your iPad to sell to someone, and they take it, but fake the payment transfer. How do you track that one back down?

…asking for a friend 🥹

buy one of those UV Counterfeit Bill Money Detector​

 
Last edited:
My gripe with Stolen Device Protection is a weird side-effect it has: when it's on, you can no longer just unlock your Apple Account, you always have to change the password.

If your Apple Account has a simple email address that other people continuously keep trying (and failing) to log into, and your Apple Account gets locked frequently, this means you'll need to reset your password frequently.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.