Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Luba

macrumors 68000
Original poster
Apr 22, 2009
1,819
389
Is it relatively easy to crack the PIN code on a physical SIM card if somebody got a hold of your nano SIM card?

If your number is on the eSIM, in order to hijack your number they would have to crack the iPhone Passcode.

Last year, I moved my number to the eSIM mainly for that safety reason. An Apple rep thought it would be more difficult to have your number hijacked if it was on the eSIM.
 
That was my question as well. Is this even a problem?
Supposedly, it is a problem as the experts say using text messages as a 2nd factor authentication is bad. If the physical SIM doesn't have a PIN set up then bad people could simply take the SIM out of your phone and put it in any phone and start getting your text messages and phone calls. With a PIN set up on the SIM, the other phone would ask for the PIN before it would work. With eSIM there nothing to take out of the phone, the bad people would need to know your iPhone Passcode to hijack your number and get your text messages and phone calls. By passing the iPhone Passcode is not easy, but is cracking the PIN on the physical SIM just as difficult??
 
T-mo was supposed to have some process weaknesses that allowed it to happen but I think I read they changed their internal rules to prevent it
 
these only protect you from someone who has physical access to your phone. To me, the least likely path to finding out your phone number. Just be more careful if you hang around people you don't trust. Screen lock. And, in that case, eSIM probably better.
 
As others have mentioned number jacking occurs at the carrier level. You should use all the security measures that your provider offers especially 2FA or an additional passcode. Adding a SIM pin is not a bad idea in the scenario your phone is physically stolen.
 
Neither because AFAIK most people get hijacked via the bad guy convincing the carrier (via social engineering) to put the existing number on a new sim which will have nothing to do with your PIN.


i.e., bad guy collects enough of your personal details to call the carrier (or maybe even do it in a store) and then get them to port your number. Pretty sure you can buy SIMs in bulk (at least used to be able to) and then get them activated as required by phoning the carrier.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.