Five iPhone Security Features You Should Be Using

[onenorth]

Wonder if lockdown mode would be a viable option to enable when crossing a border?

My thinking is to simply turn the phone off. When it is first powered up it is in before first unlock (BFU) mode, where it is the most secure. A more extreme approach is to back up everything to the cloud and wipe the phone before entering the country, then restore it later. Less convenient but more secure if they take your phone away.

 

[NasserAE]

Beware of yubikey and iOS. Apple broke the NFC functionality last November and I couldn't get into anything for a few days (iCloud, password manager etc). Total nightmare. They need to be forced if necessary to open up NFC completely and at this point even if they do, I don't trust them. Moved my daily driver to a S24U and then S25U and my 16 PM is backup. I have to be able to rely on my security tech- Apple wasn't up to the task because apparently no one in Cupertino uses physical security keys. Apple blamed yubikey FWIW, though nothing changed on the physical key 🤔😑😒🤬🙄 so ridiculous

Why do you constantly need to use your Yubikey on your own devices? I have two keys (2nd is backup) and the way it works is that once you log in using yubikey on a device then you don't need it anymore on the same authenticated device (iOS, iPadOS, macOS) unless you log out. I have it setup for all my devices for iCloud, Gmail, 1P.. etc and never had NFC fail on me. Even if it does I can use USB-C to authenticate.

 

[centauratlas]

Having lost my business partner of 25 years recently (who operated company vendor accounts on a locked, encrypted iPhone, or internet services with 2FA enabled to verify via his locked iPhone), another security feature you should list here is Legacy Contact, which allows a designated Contact (preferably a trusted relative or your executor) to unlock your Apple accounts and your devices after your death.

Yes, this should be on the list.

Right now the setting is here:
Settings -> <your name> -> Sign-in & Security then scroll down.

 

[centauratlas]

With custom numeric passcodes, you have 34 digits to spare. Now that’s a long time to brute force!

I bet I can guess the 34 digit passcode too! lol

 

[MilaM]

Yeah that’s Been an issue for me as well. I’m like whole I’m literally home. The same place I always am every night or it’ll be work where I’m at 6 days a week for like 10 hours lmao

What's really baffling about the stolen device protection, is that you can't even check if the phone has the right places saved for you as "home" and "work". When you go into settings, it only shows you the last location it has saved.

They changed this to allegedly prevent stalking, even though this section of settings is behind a face id check.

 

[MisterSavage]

Two factor authentication is amazing however it is a double edged sword.

I had to change my number awhile back due to it being posted on some shady adult websites and had pervs messaging me.

Anyway the number was changed and updated it under email and phone numbers in settings. I didn’t think much of it.



When I got my iPhone 16 pro max, I had deleted my old iPhone and had given it to someone else and I tried to set up the iPhone 16 with my Apple account and I couldn’t bc while I changed the number I had forgotten to update it in the 2 factor authentication as well thus it was still trying to contact my old phone number and I didn’t have any other devices that I could access my iCloud.

So I literally couldn’t access my iCloud for nearly a month. It was a nightmare lol.

So be warned to always make sure it’s up to date.

You should always have contingency plans for your two factor authentication. Two examples that wouldn't require your other devices or your old number: recovery key that you had previously written down or a family/friend you previously added as a recovery contact.

 

[scorpio vega]

What's really baffling about the stolen device protection, is that you can't even check if the phone has the right places saved for you as "home" and "work". When you go into settings, it only shows you the last location it has saved.

They changed this to allegedly prevent stalking, even though this section of settings is behind a face id check.

Oh wow that’s weird. I didn’t know that.

Now see this is the type of criticism I can accept from Apple bc that’s baffling

 

[scorpio vega]

You should always have contingency plans for your two factor authentication. Two examples that wouldn't require your other devices or your old number: recovery key that you had previously written down or a family/friend you previously added as a recovery contact.

lol well I know that now haha. I normally still have access to my old iPhone when switching to a new one but I had already factory reset and sold the older one so I was screwed for a bit.

 

[Siriosys]

One unintended annoyance with Private Relay is that if your home network has any form of DNS based ad-blocking enabled on your router or firewall it’s likely that your browsing experience will now include ads once you’ve activated it.

 

[Hank001]

Lots of missing info in this article. No list of ADP supported devices and such.

Anyway, the first thing I would do is change the passcode to a password, before any of these mundane settings.

 

[matsan]

I have never understood Apple’s 2FA. If i open Safari on my Mac and connect to my iCloud account - i get the verification code in a popup ON MY MAC! Why is this safe?

 

[MilaM]

I have never understood Apple’s 2FA. If i open Safari on my Mac and connect to my iCloud account - i get the verification code in a popup ON MY MAC! Why is this safe?

It does make sense when you think about it. You already proved that you have control over the Mac by linking your Apple Account to it. The logged in device is like a second factor in this case.

This is also the reason why it's important to keep track of the devices that you have linked to your account and be careful with whom you share your account passwords/passcodes.

 

[MilaM]

You should always have contingency plans for your two factor authentication. Two examples that wouldn't require your other devices or your old number: recovery key that you had previously written down or a family/friend you previously added as a recovery contact.

It's a good idea to carfully go through the recovery options at least once. If you keep your contact details current, you should not have any problems. There are many ways to get into an Apple Account, even when you forget your password. Maybe even too many if you ask me.

 

[Hank001]

It’s all littered with unnecessary security crap. When I want to sync new music to my iPhone I plug in the cable. Each time the freaking Mac tells me I need to approve this on my iPhone. So, tap trust computer, and sure enough, the crap phone asks me for my password. Every freaking time. Bloody useless design.

 

[jclo]

I think its a little ridiculous that the article says "If you don't already have these enabled, you might want to consider turning some of them on." and then lists Two-Factor Authentication first.

At this point, if you don't have Two-Factor Authentication enabled, it's because you have done your absolute best to avoid those sneaky persistent attempts by Apple to get you to enable it via endless prompts and changing notifications.

I truly think you'd be surprised at how many people I have come across without it on!

 

[Mousse]

The one security feature I want Apple to implement on iOS is a firewall. It's so easy, it's set and forget. 24/7 protection from rogue app hosing your data plan, spyware phoning home, annoying ads.😘 Oh right, that's why Apple--or Google--will never implement a firewall on there mobile OS. They don't want to lose that sweet, sweet advertising money.🤑🤑🤑

 

[LordArchie]

My thinking is to simply turn the phone off. When it is first powered up it is in before first unlock (BFU) mode, where it is the most secure. A more extreme approach is to back up everything to the cloud and wipe the phone before entering the country, then restore it later. Less convenient but more secure if they take your phone away.

Agree..if in a hurry, I believe 5 quick presses of the power button does the same thing

Don't think hard reset is a viable option (for me)

 

[Tagbert]

Wipe the phone, stick on it a ‘burner’ email account and populate it with email you need. Same with sms etc but leave messages disabled. Once you are over the border, factory default and restore your main iCloud account. Or just take a burner phone with you when you travel.

How do you login and restore after crossing the border if you have 2-factor enabled?

 

[Scoob Redux]

You can manage two-factor authentication by going to Settings &gt; Sign-In and Security.

Wrong on 2 counts:

First, it's not "Settings > Sign in & Security", it's Settings > Apple ID, iCloud, Media & Purchases > Sign in & Security

Second, it's impossible to "manage" two-factor authentication. You can only turn it ON, you can never turn it OFF. So it can't be "managed".

 

[matsan]

It does make sense when you think about it. You already proved that you have control over the Mac by linking your Apple Account to it. The logged in device is like a second factor in this case.

This is also the reason why it's important to keep track of the devices that you have linked to your account and be careful with whom you share your account passwords/passcodes.

No, sorry - it didn’t make sense at all. Correctly implemented 2FA should be true two factors so the device I’m trying trying to login on should never receive the code!

 

[MilaM]

No, sorry - it didn’t make sense at all. Correctly implemented 2FA should be true two factors so the device I’m trying trying to login on should never receive the code!

I'll admit, I was also surprised the first time this happened on my Mac.

The issue is, how should Apple's servers know, from which exact device you're trying to sign in?

Safari is heavily sandboxed and mostly behaves like any other browser. There are no APIs that would give websites the identity of you Mac even before authentication. It is very easy how such an API could be easily abused.

You could of course use PassKeys for your login. In this case, there would likely be no pop-up and no need to provide a 2FA code.

 

[HazeAndHahmahneez]

Two factor authentication is amazing however it is a double edged sword.

I had to change my number awhile back due to it being posted on some shady adult websites and had pervs messaging me.

Anyway the number was changed and updated it under email and phone numbers in settings. I didn’t think much of it.



When I got my iPhone 16 pro max, I had deleted my old iPhone and had given it to someone else and I tried to set up the iPhone 16 with my Apple account and I couldn’t bc while I changed the number I had forgotten to update it in the 2 factor authentication as well thus it was still trying to contact my old phone number and I didn’t have any other devices that I could access my iCloud.

So I literally couldn’t access my iCloud for nearly a month. It was a nightmare lol.

So be warned to always make sure it’s up to date.

How did you finally gain access???

Additional security methods I strongly recommend and apply on each Iphone in the family:

- dont use a digit pin for unlocking. Use a strong passphrase
- against someone snapping your phone (android has a motion detection)
— add a shortcut to lock the screen and enable mobile data again if someone (thief) activates airplane mode
— lock the screen if any bluetooth disconnects (airpods, car)
— face id lock apps such as whatsapp or mail, so that a thief cannot access it
- disable face id with mask
- disallow default control center access when screen is locked

Unfortunately, some default “design” decisions on the iphone are simply insecure and so simple that it almost seems intentional 🙁

Could you go into detail on your third point about the shortcut for Lock Screen and the be tone about Bluetooth disconnecting? TIA

 

[applefan8254]

Can we please get multiple users? Thank you