All Devices Something unsettling about Find My

[Shirasaki]

Hello guys. Hope you have a nice weekend.

I recently notice one thing that makes me feel creepy regarding the “Find My” in iOS 13. Specifically, when I launch the app from either iPhone or iPad, I do not need to type in my Apple ID password, which is not the case for iOS 12 and below “Find iPhone” app. I am not entirely sure if this is a conscious design choice or just an oversight. But, if someone has the physical access to your device, and the device is unlocked, he can easily see all devices connected to your Apple ID via Find My without the need to type in password.

Maybe someone will think about seeing a prompt of “Face ID” or “Touch ID”. Nope. Tap the app icon, and I am straight into main screen, with device location displayed on the map. I am not so comfortable with this design choice, and hope Apple could at least prompt the password.

I have reported this via Feedback app.

 

[TimFL1]

Hello guys. Hope you have a nice weekend.

I recently notice one thing that makes me feel creepy regarding the “Find My” in iOS 13. Specifically, when I launch the app from either iPhone or iPad, I do not need to type in my Apple ID password, which is not the case for iOS 12 and below “Find iPhone” app. I am not entirely sure if this is a conscious design choice or just an oversight. But, if someone has the physical access to your device, and the device is unlocked, he can easily see all devices connected to your Apple ID via Find My without the need to type in password.

Maybe someone will think about seeing a prompt of “Face ID” or “Touch ID”. Nope. Tap the app icon, and I am straight into main screen, with device location displayed on the map. I am not so comfortable with this design choice, and hope Apple could at least prompt the password.

I have reported this via Feedback app.

I had to enter my password exactly once in Find my iPhone pre-iOS 13 (first time opening the app). Has worked without a password ever since... ?

You have far bigger problems when you leave your iPhone unlocked on a table I'd wager.

 

[MORGiON666]

You didn’t have to type you password in every time on ios12 either.

 

[Shirasaki]

You didn’t have to type you password in every time on ios12 either.

Really? What I remember is every time I quit the app or restart the phone, I have to type Apple ID password when using Find iPhone app. Find My on the other hand, does not even prompt once that.

 

[Dwalls90]

Find my friends didn’t require a password. I think Find my iPhone may have.

Keep in mind some system apps don’t require logins each time, if you have your device set to always be locked with a passcode and/or TouchID/FaceID.

 

[chabig]

Why does it matter? You’re authenticated biometrically with TouchID or FaceID, and have access to everything on the device. Typing a password isn’t going to make it any more secure.

 

[I7guy]

Find my iPhone on 12.4 requires a password when you are signed out. I just tried this on my 5s and the first time FMI required a password. Then restarted and no password required. So it seems your partially right.

 

[Yun0]

So if you dont lock your front/back doors to your house, you think locking the (probably more flimsy too) door to your room is going to do much?

 

[Shirasaki]

So if you dont lock your front/back doors to your house, you think locking the (probably more flimsy too) door to your room is going to do much?

Obviously I will lock my front door after locking the door to my room. The point is, I should be able to lock the door to my room (need to type a password to use Find My), and that lock is not the same one I use to unlock my main door (passcode). What Apple does now is removing the lock to my room (use Find My without typing Apple ID password), which I am not a big fan of.

 

[AppleHaterLover]

Why does it matter? You’re authenticated biometrically with TouchID or FaceID, and have access to everything on the device. Typing a password isn’t going to make it any more secure.

This exactly. 9 times out of 10 Find my iPhone is used in emergency situations and adding another layer to access it, when the user has probably just used Face ID, does not help