Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

iHorseHead

macrumors 68000
Original poster
Jan 1, 2021
1,812
2,328
Hi,
I've seen videos and screenshots of people getting their iPhones stolen and asking for passcodes, but I forgot my passcode today and restoring it to the factory settings was very easy, which is quite worrisome.
Also, after restoring my phone I remembered my passcode 😅 But it was very easy. What would stop a thief for stealing my iPhone and just reselling it?
And why do people ask for passcodes if you can restore without it.I wish iPhones were more secure.
 
  • Haha
Reactions: GioGiusi
I thought the same thing! But isn’t it true that even after a factory reset, the iPhone still asks for your Apple ID when setting it up again? Unless someone also gets that info, it’s useless, right?
 
  • Like
Reactions: Parowdy
Yep, that’s true. A factory reset doesn’t bypass the Apple ID lock. Unless the thief also knows your Apple ID and password, the phone is basically useless.
 
All of this is why you should not use "1234" as a passcode. I use both letters and numbers, and also the password to your Apple account should also be complex (not easily guessed). Yeah, the device can still be stolen, but as was said above, your data is better protected.
 
  • Like
Reactions: kitKAC
All of this is why you should not use "1234" as a passcode.
And turn on Stolen Device Protection so a certain kind of thief can't use your forcefully-obtained passcode to take control of your Apple Account and lock you out of your ID and your other devices that have Find My turned on.

 
Last edited:
If your iPhone is activation locked, it won't matter if the thief restores the phone. They won't make it past the setup procedure so the passcode isn't relevant anymore.
 
Hi,
I've seen videos and screenshots of people getting their iPhones stolen and asking for passcodes, but I forgot my passcode today and restoring it to the factory settings was very easy, which is quite worrisome.
Also, after restoring my phone I remembered my passcode 😅 But it was very easy. What would stop a thief for stealing my iPhone and just reselling it?
And why do people ask for passcodes if you can restore without it.I wish iPhones were more secure.
If you were able to restore your iPhone without inputting your passcode or your AppleID username/password then you have disabled the default protection of Activation Lock through FindMyiPhone.
Check if you have FindMy and Stolen Device Protection active in settings, as without that you have lost quite a bit of the security
 
If your iPhone is activation locked, it won't matter if the thief restores the phone. They won't make it past the setup procedure so the passcode isn't relevant anymore.
With your passcode they can reset your password on your Apple account. With your Apple account username and password they can turn off activation lock while downloading all your personal data and other saved passwords.
 
That’s what you can do with the passcode. Unless your life is in danger don’t let someone have it.

IMG_2861.jpeg
 
  • Like
Reactions: CharlesShaw
If a thief knows the passcode, they can open the password app to retrieve the Apple ID and password. At that point they can also reset the passcode and biometric settings, and have access you any linked credit cards and data.
 
  • Like
Reactions: russell_314
If a thief knows the passcode, they can open the password app to retrieve the Apple ID and password. At that point they can also reset the passcode and biometric settings, and have access you any linked credit cards and data.
Turning on stolen device protection mitigates this. By default even if you turn it on, it’s only active when you’re away from “familiar locations”. This is a big security flaw because if your phone gets stolen at work or home, they could just simply turn off stolen device protection right there since it’s a familiar location. You have to set it to all locations. This also means when you’re about to turn in your phone for repair or trade-in, you have to plan ahead and turn it off.
 
With your passcode they can reset your password on your Apple account. With your Apple account username and password they can turn off activation lock while downloading all your personal data and other saved passwords.
From the way I understand the OP, he never said the thief had the passcode, only asked for it. If he doesn't have the passcode I don't see how he can disable anything. If they're asking or threatening you during a robbery I guess it's up to the person how important the phone and data is to them. In my state, they support stand your ground, castle doctrine and constitutional carry. The thief could find themselves in the morgue very easily. Not the first time someone lost their life committing a crime
 
  • Love
Reactions: russell_314
From the way I understand the OP, he never said the thief had the passcode, only asked for it. If he doesn't have the passcode I don't see how he can disable anything. If they're asking or threatening you during a robbery I guess it's up to the person how important the phone and data is to them. In my state, they support stand your ground, castle doctrine and constitutional carry. The thief could find themselves in the morgue very easily. Not the first time someone lost their life committing a crime
From my understanding the latest tactic is thieves shoulder surf you entering your password then when you’re not paying attention grab your phone and run. Not much you can do in that scenario once you put yourself in the situation. Turning on stolen device protection does seem to help
 
  • Like
Reactions: BugeyeSTI
From my understanding the latest tactic is thieves shoulder surf you entering your password then when you’re not paying attention grab your phone and run. Not much you can do in that scenario once you put yourself in the situation. Turning on stolen device protection does seem to help
I suppose the safest bet in the situation you described is to only unlock your device with FaceID or TouchID in bars or crowded/public places. If it doesn't unlock and asks for your passcode, you should be extra careful by checking your immediate surroundings to see if someone has unusual interest in what your doing. Having an Apple Watch is very helpful in this situation by being able to unlock your phone with the watch without needing the passcode..
 
  • Like
Reactions: russell_314
If a thief knows the passcode, they can open the password app to retrieve the Apple ID and password. At that point they can also reset the passcode and biometric settings, and have access you any linked credit cards and data.
I hope everyone understands that it is absolutely idiotic to store your Apple ID credentials in the Apple passwords app. That's like storing your safe's code on a sticky note inside the safe. The login credentials to your password manager (which is your Apple ID if you use the password app) should always be one of the few passwords memorized and, if further backup is needed, written down in a safe physical location.

Device passcodes and Face/Touch ID can be used to access passwords on a device that has been authenticated, but your Apple ID and password are the real credentials.
 
If find my is turned on then the iPhone becomes a brick once stolen unless the thief also knows or can change your apple account password.
Find My is a double edged sword, so I only use it on devices that leave the house --insurance against bricking ALL of my devices if I permanently lost access to my Apple ID.
 
If a thief knows the passcode, they can open the password app to retrieve the Apple ID and password. At that point they can also reset the passcode and biometric settings, and have access you any linked credit cards and data.
Is there any way around it besides creating a new passcode for ScreenTime?
 
I suppose the safest bet in the situation you described is to only unlock your device with FaceID or TouchID in bars or crowded/public places. If it doesn't unlock and asks for your passcode, you should be extra careful by checking your immediate surroundings to see if someone has unusual interest in what your doing. Having an Apple Watch is very helpful in this situation by being able to unlock your phone with the watch without needing the passcode..
This!
Using FaceID will stop anyone from seeing you enter your passcode over your shoulder.
 
I suppose the safest bet in the situation you described is to only unlock your device with FaceID or TouchID in bars or crowded/public places. If it doesn't unlock and asks for your passcode, you should be extra careful by checking your immediate surroundings to see if someone has unusual interest in what your doing. Having an Apple Watch is very helpful in this situation by being able to unlock your phone with the watch without needing the passcode..
I know some people that don’t use Face ID because they feel it’s a privacy issue. They are putting themselves in additional risk though. You can use a password instead of a passcode and in theory that would be harder to read over your shoulder. I don’t do this because I don’t feel it’s necessary. I keep stolen device protection on. I feel that’s minimal security.
 
I know some people that don’t use Face ID because they feel it’s a privacy issue. They are putting themselves in additional risk though. You can use a password instead of a passcode and in theory that would be harder to read over your shoulder. I don’t do this because I don’t feel it’s necessary. I keep stolen device protection on. I feel that’s minimal security.
I have SDP on and I also set Screen Time up (with a different passcode) to block access to account and FaceID/TouchID changes. Not sure if it will help but it's another hoop a thief would have to jump through..
 
  • Like
Reactions: russell_314
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.