Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Lets hope they fix the MDCrashReportTool bug preventing syncing with computer. At the moment one can make it sync by opening activity monitor and kill MDCrashReportTool but that shouldn’t be necessary. One may try to delete or rename MDCrashReportTool itself but the computer may try to prevent you from doing that.
To sync I do this:

Minimize all windows.

Plug in phone.

Then immediately start stabbing the return key so as to catch the sync dialogue box.

Usually works. Sometimes I have to unplug phone and try again.
 
One significant negative…Face/Touch ID to turn off FindMy…that may/will be an issue at the Apple Store when you need to turn off FindMy for a repair or swap…

Shouldn't be a problem at all. Turning that off already requires a the passcode--this is just more secure in that you'll have to use your Face ID to turn if off. Doesn't change anything, the person doing the repair wouldn't have your passcode anyway, they ask you to turn it off before you leave them with your device.
 
The stolen device protection is nice to have. However, in my country most of the stolen iPhone devices are disassembled and parts sold in the grey market…
 
  • Sad
Reactions: zapmymac
So your best bet will be to keep a Mac or iPad at home, if your iPhone and Apple Watch get stolen go home in less than 1 hour, and set the iPhone to Lost Mode from the iPad or Mac and send a remote reset request. Then it will need the iCloud password to be used again and passcode won't do anything. Also will be able to delete eSIM from the phone remotely (can't really delete regular SIMs but you can get them off your account through your carrier). Also reset your iCloud password just in case they manage to send the request to reset it (but it's still time-delayed). Might be a little complicated to remember these steps but it might work.

Although I'll say, like 99% of the time there are thieves that just take your phone and they keep it off and in a faraday cage so it can't even Bluetooth track itself when off, they don't have the passcode so this isn't a worry, but there are thieves that will pull a gun on you and demand the passcode.
 
  • Like
Reactions: shakopeemn
In addition to these changes I think for the critical security actions like changing Apple ID password and removing Find My iPhone; if an account has more than one device, two devices should be required to perform such action. For example to change the apple id password from my iPhone, the MFA prompt would be triggered on all other devices EXCEPT the iPhone for approval (e.g. iPad or TOTP Web - which apple should add support for imo).
 
  • Like
Reactions: Robert.Walter
Shouldn't be a problem at all. Turning that off already requires a the passcode--this is just more secure in that you'll have to use your Face ID to turn if off. Doesn't change anything, the person doing the repair wouldn't have your passcode anyway, they ask you to turn it off before you leave them with your device.
Turning off Find My is on the list of actions that require a 1-hour delay if not at home.

If you turn off Find My at home or 1-hour before your Genius Bar appointment, it’s nbd. If you turn it off AT the Genius Bar like many do, you’d have to wait around for another hour to actually turn it off. That’s why they said it was a problem.
 
  • Like
Reactions: jimlat
The stolen device protection is nice to have. However, in my country most of the stolen iPhone devices are disassembled and parts sold in the grey market…
As you alluded to, this feature won’t do anything to address that, but it wasn’t intended to. Its intention was to protect user data—which it still accomplishes even if the device is disassembled and sold for parts.
 
So your best bet will be to keep a Mac or iPad at home, if your iPhone and Apple Watch get stolen go home in less than 1 hour, and set the iPhone to Lost Mode from the iPad or Mac and send a remote reset request. Then it will need the iCloud password to be used again and passcode won't do anything. Also will be able to delete eSIM from the phone remotely (can't really delete regular SIMs but you can get them off your account through your carrier). Also reset your iCloud password just in case they manage to send the request to reset it (but it's still time-delayed). Might be a little complicated to remember these steps but it might work.

Although I'll say, like 99% of the time there are thieves that just take your phone and they keep it off and in a faraday cage so it can't even Bluetooth track itself when off, they don't have the passcode so this isn't a worry, but there are thieves that will pull a gun on you and demand the passcode.
I’d think this feature still protects the user’s data if the phone is kept off/only turned on in a faraday cage. They’d need biometric authentication to get access to any sensitive information, which they won’t have.
 
In the meantime look into what you can disable using content restrictions under screen time in settings. You can block a lot of things from happening behind a separate PIN code like being able to even get into iCloud settings or seeing faceid in the settings list. I keep this on pretty much all the time since that report earlier this year.
This can be easily circumvented by following the steps listed here:

https://forums.macrumors.com/thread...e.2381922/page-38?post=32028392#post-32028392

Perhaps it’s marginally better than just having a passcode, but against a bad actor who knows what they’re doing it, would be of little use.
 
"iPhone users who update to the iOS 17.3 beta will be prompted with the option to test a preview of the feature following installation, but Apple said this screen will not be shown to users who install the public version of iOS 17.3 coming later."

What does that mean? Are they just testing it in the beta versions of 17.3, and don't intend to put it in the release version, but instead in a later release version, like 17.4 or 17.5?
 
This is a fantastic feature and great that they implemented it so soon after all the negative press. However, I don't think I'll be turning it on in the beta. I really don't want to get locked out of everything by a bug in a beta build. lol
 
Shouldn't be a problem at all. Turning that off already requires a the passcode--this is just more secure in that you'll have to use your Face ID to turn if off. Doesn't change anything, the person doing the repair wouldn't have your passcode anyway, they ask you to turn it off before you leave them with your device.
Turning off FindMy is one of the 1 hour delay situations…and what if it’s a no power phone or TrueDepth camera issue? Could get interesting…

Don’t get me wrong…it’s a great concept for data and Apple ID protection, but the devil’s in the details with potential unintended consequences…
 
  • Like
Reactions: Robert.Walter
"
Actions that will require Face ID or Touch ID authentication when the feature is turned on:
  • Viewing/using passwords or passkeys saved in iCloud Keychain"
- I don't get this, isn't this the default behavior in the settings app? It always requires Face ID for me, what's new about it?
 
  • Like
Reactions: Robert.Walter
Does this mean the thief would need to enter the faceId or touchId WITHOUT the passcode backup method? The WSJ article linked is about how they can do anything with a stolen iphone passcode. This would be great if they addressed that. I suppose not so if the faceId/touchId HW died though 🤔

One of the big drawbacks with this is the time frame. For the rare occasions I need to change my password, I needed to change it in a very short time frame. Add to this if your phone gets damaged that it affects the front camera, you have no choice but to get it repaired before you can do this.

It needs alternative methods like instead of FaceID/TouchID, the use of another optional device

One step forward, one step back.
 
  • Like
Reactions: Robert.Walter
How about a free track and boxing membership for every device purchased so we can chase down the thieves and take care of business the old-fashioned way?

Um, if we lose we will use that one hour delay thanks.
 
  • Like
Reactions: Robert.Walter
Yes, I did that earlier this year and protected myself as best I could with the current OS. I also have a third party password manager for my most sensitive accounts, in addition to keychain.

One issue victims suffered from was when they had banking passwords / credentials stored in keychain, enabling a thief to access their finances. I don't use it to store those. I had also checked with my bank and they confirmed their app would require a separate access code if the Face ID was ever reset.


True. There is an option for you to add a trusted person to your account in the event of your death.

Apple seems to enjoy making complex solutions(?) to existing problems. Give me a secondary access code / password for other actions than unlocking the device and can use FaceID/TouchID in place of by choice.
 
In the meantime look into what you can disable using content restrictions under screen time in settings. You can block a lot of things from happening behind a separate PIN code like being able to even get into iCloud settings or seeing faceid in the settings list. I keep this on pretty much all the time since that report earlier this year.
Gotta get around to that....
 
  • Like
Reactions: Robert.Walter
So your best bet will be to keep a Mac or iPad at home, if your iPhone and Apple Watch get stolen go home in less than 1 hour, and set the iPhone to Lost Mode from the iPad or Mac and send a remote reset request. Then it will need the iCloud

I agree, not quite understanding why the one hour opportunity for me to stop things, after I notice device missing.
 
I agree, not quite understanding why the one hour opportunity for me to stop things, after I notice device missing.
Currently if the thief has the Passcode, they would go in and reset your iCloud password, and delete other devices from iCloud so you can't change anything back on your other devices. So the 1 hour locks out those changes unless you're in a trusted location.
People think screen time passcode can lock this change out, but you can reset the screen time passcode with the device passcode.
1 hour might not even be enough sometimes, but if you have Family sharing you can have someone else do this for you.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.