Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

JJwong

macrumors newbie
Original poster
Nov 18, 2016
5
0
Hey guys,

I had my phone stolen yesterday, picked out of my pocket. Then, today I received an unsettling email to the gmail account linked to my icloud - that find my iphone had been disabled on my phone.

Loosing my phone isn't too bad, I can replace it. However, what is scary is the thief knew my lock screen passcode, as well as my icloud password, because that is required to disable find my iphone.

So, I'm worried that they have all my info and are going to use it for ill. It was an iphone 6 plus, ios10 i believe.

I don't get how they got my password, lock screen code. Can anyone think of other scenarios and explanations to what happened?

Best,
Justin
 
Have you had similar or the same password for iCloud and Gmail?
I don't see any other idea how they was able to change your iCloud password then
 
  • Like
Reactions: ABC5S
This is extremely unlikely. Extremely.

Were you commuting at the time? Could the thief have watched you out in your passcode?

Obviously your account didn't have 2-factor authentication on?
 
Last edited:
They dont need your iphone passcode to remove find my iphone.
It can be done by logging in to your icloud account.
Not sure how they got your apple id and password to do that but change your password and enable 2 step authentication right away.
 
  • Like
Reactions: ardchoille50
Hey guys,

I had my phone stolen yesterday, picked out of my pocket. Then, today I received an unsettling email to the gmail account linked to my icloud - that find my iphone had been disabled on my phone.

Loosing my phone isn't too bad, I can replace it. However, what is scary is the thief knew my lock screen passcode, as well as my icloud password, because that is required to disable find my iphone.

So, I'm worried that they have all my info and are going to use it for ill. It was an iphone 6 plus, ios10 i believe.

I don't get how they got my password, lock screen code. Can anyone think of other scenarios and explanations to what happened?

Best,
Justin
******** post, just trying to weasel out info from the collective community.
 

He believes it is an elaborate ruse to hustle information from the community. I.e, OP is asking if there are holes in iCloud security that can be exploited.

As for the original post, I find it highly unlikely a stranger has managed to disable find my iPhone when I don't believe the Apple ID can be found from a locked screen. Unless they were extraordinarily lucky in guessing the passcode before the iPhone was disabled and your account security was weak.
 
He believes it is an elaborate ruse to hustle information from the community. I.e, OP is asking if there are holes in iCloud security that can be exploited.

As for the original post, I find it highly unlikely a stranger has managed to disable find my iPhone when I don't believe the Apple ID can be found from a locked screen. Unless they were extraordinarily lucky in guessing the passcode before the iPhone was disabled and your account security was weak.
I see. Thanks for the clarification.
 
  • Like
Reactions: bchreng
2FA is great security - it even blocked me when I downgraded my SE to 9.3.5 few weeks ago and I was unable to get codes. After I finally found second phone and switched SIM card I got sms with code.
 
Guys, how come the 2FA isn't showing up for me as an option to enable? I want that extra security, didn't even know about it till I found this thread.
 
Guys, how come the 2FA isn't showing up for me as an option to enable? I want that extra security, didn't even know about it till I found this thread.

Can it be that you have two-step verification enabled?

Two-step verification and two-factor authentication are different things in Apple ecosystem, although based on a similar principle.

To enable the two-factor authentication you need to a) have at least one device capable of running iOS 9, OSX El Capitan or later b) disable the two-step verification if it is on
 
Last edited:
Yea, I'm guessing we won't see the OP again.
Not necessarily. When I travel on the train, I see many people unlocking phones, many do it in clear sight, so if I wanted I could write down their passcodes. And you often travel with the same people. So if I was a thief and talented that way, I could probably steal someone's phone _and_ know their passcode. Someone with an even more evil mind than me might post how far you will get with a stolen phone, plus passcode, but without the Apple Id.
 
Can it be that you have two-step verification enabled?

Two-step verification and two-factor authentication are different things in Apple ecosystem, although based on similar principle.

To enable the two-factor authentication you need to a) have at least one device capable of running iOS 9, OSX El Capitan or later b) disable the two-step verification if it is on
It's not enabled as far as I know. My 6S+ is on 9.3.5, if that makes any difference. I go to icloud on the phone, password and security, and there's no 2AF to enable. I dunno, i'm confused here.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.