iPhone passcodes, how risky is it to use something like 333777 or 555222, as opposed to 728109 or 397165? (none are actual passcodes, just random numbers used as examples)
thanks!
thanks!
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
iPhone passcodes, how risky is it to use something like 333777 or 555222?
- Thread starter beerseagulls
- Start date
- Sort by reaction score
Reverend Benny
macrumors 68000
Depends on what you consider risky and in what cases.
Its easier for a bystander to look at you entering the code and remember it. But if they are rainman types of people or film you entering it your screwed anyway no matter how complex it is.
Best option is to have a 6 digit code but that the phone will erase after 10 tries and that you have other safety measures enabled. i.e you can't change your icloud password unless you are in a know location etc. That way you have time to erase and/or lock the phone if its stolen.
Also, use touch-ID or face-id instead of codes when possible and lock vital apps with biometric ID's
Its easier for a bystander to look at you entering the code and remember it. But if they are rainman types of people or film you entering it your screwed anyway no matter how complex it is.
Best option is to have a 6 digit code but that the phone will erase after 10 tries and that you have other safety measures enabled. i.e you can't change your icloud password unless you are in a know location etc. That way you have time to erase and/or lock the phone if its stolen.
Also, use touch-ID or face-id instead of codes when possible and lock vital apps with biometric ID's
So much this imo. I have a 12 character mixed case, special characters, digits passcode on my iDevices and generally don't have to enter it often during the course of a week since I use Touch/Face ID.
Throw in the erase after 10 mentioned previously, if not set, not great idea to use "simple" sequences of numbers that someone can shoulder surf to get.
A little old, but lines up with what I've seen over the years. "Simple" sequences are used often.
GitHub - Slon104/Common-PIN-Analysis-from-haveibeenpwned.com: I have gathered data from haveibeenpwned.com for every common PIN and how often it is used. I am sharing with you a complete wordlist sorted by the most popular PINs first. Feel free to do
I have gathered data from haveibeenpwned.com for every common PIN and how often it is used. I am sharing with you a complete wordlist sorted by the most popular PINs first. Feel free to download it...
github.com
And no matter the passcode, need situational/location awareness. Does one REALLY need to unlock their device right now on a busy street, standing on a curb, where someone can easily grab one's device, shoulder surf? Not immediately locking device after using? Putting device on a table/bar top vs putting in one's pocket? Etc.
Last edited:
eyoungren
macrumors Nehalem
Use a number that's personal to you for a passcode.
It's six numbers, but someone would have to be inside my head to guess my passcode. They'd have to know the employee number I had in my very first job 38 years ago. I also have some alternate numbers and they'd have to know what those numbers mean and where they came from.
Could someone guess? Yes. But they wouldn't KNOW for a fact unless they knew me inside and out.
Better yet, use a passphrase. Again, something that's personal only to you.
It's six numbers, but someone would have to be inside my head to guess my passcode. They'd have to know the employee number I had in my very first job 38 years ago. I also have some alternate numbers and they'd have to know what those numbers mean and where they came from.
Could someone guess? Yes. But they wouldn't KNOW for a fact unless they knew me inside and out.
Better yet, use a passphrase. Again, something that's personal only to you.
my actual passcode is the last 6 digits of the phone number of the very first girl that I had a crush on in my life.... 47 years ago.... 🙁
eyoungren
macrumors Nehalem
Reverend Benny
macrumors 68000
As long as you can remember it 🙂
But what more important is that you have more security measures in place and also another secure device that's tied to you Apple account that can receive the MFA code(trusted device). Or, have the backup code written down somewhere in a safe place.
The phone itself if stolen is normally not the worst part to loose, its when they hijack your Apple account and you loose access to all your data things become a pain, and that's why its important to know what to do if the device get stolen or lost.
ElPaso
macrumors 6502
Thanks, now that song is stuck in my head. Grumble grumble grumble.
eyoungren
macrumors Nehalem
Sure. If I can recall exactly where I was the first time I heard that song on the radio, then everyone else must be afflicted! LOL! 😀
Apple_Robert
Contributor
ElPaso
macrumors 6502
How'd you get my passcodes???!?
JK
As mentioned in other responses, if someone sees you type in 444999 rather than a random spread, it's much easier for them to remember. However, the odds of someone guessing the code are 1 in 60,466,176 whichever numbers you choose. (That's 6 to the 10th power). My passcode(s) are 6 also, but they're alphanumeric -- so, with caps included, the chance of breaking my code is 1 in almost 57 billion. Plus, only 10 guesses and your info is erased - -
But to your question, a number like 333555 is not as safe because someone who may see you enter it will be able to remember it much easier.
963852741
Suspended
Based on basic probabilities reapeating digitis reduce how secure is your password, especially if it's numbers only.
speaking of bank pin#.... I used to have an account with Citibank. They gave customers the choice of two ATM PIN numbers. One works like normal PIN. The second one was like a panic button PIN. Once entered on their own ATM machines, it triggers a silent alarm. All account functions are locked out and balances were all displayed as $0. (to throw off the criminal who might be forcing you to withdraw money) The police was supposed to be summoned as well.
