Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
just how safe(or unsafe) was it when I entered my Apple ID password before giving phone to Apple Store for battery replacement?
- Thread starter beerseagulls
- Start date
- Sort by reaction score
Since all iPhones running iOS 15.x and iOS 14.x and higher have serialized parts, the security measures have been further enhanced with iOS 18. This version introduces stricter activation lock protocols. When you take your iPhone to an Apple Genius for repairs, you must turn off “Find My” before they can begin the process. They will verify that this is done correctly on the spot.
The calibration software integrated into iOS 18 and subsequent versions will not release a part or mark it as genuine if it detects an activation lock. This ensures that only authorized repairs can be performed. Additionally, the latest iPhones, starting with the 15 Pro, have nearly every component serialised, from the screen to the back glass or chassis.
There is also a likelihood that your iPhone may be reset or restored to factory settings during the repair process. This requirement has been in place at Apple stores since the introduction of “Find My iPhone” years ago.
Has nothing to do with that. In the past many years, Find My was never required to be off for service.
What changed was scammers brought stolen phones to Apple Store for battery service. They would rig it so opening the device would cause device failure. Apple Stores would have to replace the phone in those situations (with a clean unlocked phone). Turning off Find My helps confirm the customer is the legit owner of the device.
It isn't. You can set up a brand new phone without an Apple ID or turning on Find My.
They never need your password. They DO need Find My to be turned, or, in if stolen device protections is turned on, the device to be "prepared for trade in or repair." This is a two fold requirement - 1) Turning it off proved ownership/permission 2) The phone cannot boot to diagnostics mode (needed for repair calibration) if activation lock is active.
You can do that with both old and new phones. Apple doesn't require an Apple ID to set up any phone.
Not everyone enables find my. Assuming what you're saying is true - it's not foolproof and I would think there are better ways to confirm legitimacy.
If someone doesn’t enable Find My, then anybody can take it claim ownership. That’s literally what Apple tells you to do before selling the device.
Sure, there might be other ways, but Apple relies on this. Apple Store reps aren’t going to DNA test you or ask you to produce an investigative report before starting service.
what about the Apple authorized service center(3rd party) that requires the passcode when dropping of iPhones for battery replacement?(free replacement using AppleCare) Am I being paranoid because I feel that's a huge security issue?
By providing your device passcode, you’re handing over access to your device. That’s something I would personally never be comfortable doing.
If it’s express replacement y’all absolutely have to turn off Find My. The broken Apple product will need to be reset and returned to Apple within a few weeks upon delivery of the replacement device.
Anybody can claim ownership irrespective of enabling find my.
Something more along the lines of providing a copy of the purchase receipt, date of purchase/where, etc would be a good alternative.
People buying second hand or gifted an iPhone would be screwed. Even for original owners, a few years down the road and you ask them for a receipt, probably half of them would have trouble producing one.
Think globally too. Many places around the world don't have Apple stores and phones are sold by resellers.
They don't need a passcode to complete the repair. They just want it to ensure the new battery status is correctly displayed under Settings.
Only requirement I know off and experienced is switching off 'find my'. I never had to provide a password nor did so. That's putting too much trust in any one company or person. Testing? In my presence, thank you very much...
These solutions need not be all or nothing, much like there are typically multiple acceptable options to verify your identity (i.e. DL or passport).
Surely, you must know that doesn't exist in the real world. Apple is a for-profit company and wants to sell stuff.
Apple Stores ask customers to disable Find My as proof of ownership. It's a balance between convenience and security.
Your "all" approach requires a driver's license, so how would a teenager or some non-driver prove they bought an iPhone? Same for asking non-travelers for their passport. Then there are privacy concerns. Who would agree to Apple recording such ID numbers? As I mentioned before, buyers of used iPhones would be screwed along with gift recipients.
Of course it exists in the real world, I gave a real world example. Mind you I stated it need *not* be all or nothing - my approach doesn't require anything specific, nor did I suggest Apple ask to see a DL although they certainly could do that - the whole point here is effective alternatives. Gift recipients and buyers of used devices would not be screwed.