iPhone Security Settings
If you have an iPhone, there are a few practical steps you can take to strengthen its security and protect your data if your phone ever gets lost or stolen.
With phone theft on the rise, particularly unlocked phones on the street, we want to ensure you are prepared and protected. As well as keeping your phone physically safe, there are several things you can do to improve iPhone security, protect your data, and help you in case of loss, theft, or recovery.
Stolen device protection provides an extra layer of security when your phone is away from familiar locations to help protect your accounts and personal information in case your iPhone is ever stolen. Biometric authentication is mandatory for actions such as accessing stored passwords and credit cards. This also activates a security delay for actions such as changing your apple account password, which requires you to wait an hour and then perform a second biometric authentication. This is to give you time to report your device as stolen before the thief attempts to lock you out of your iCloud account.
- Go to Settings, then click Face ID & Passcode.
- Enter your device passcode.
- Click Stolen Device Protection, then turn on Stolen Device Protection.
Erase Data when turned on will erase all the data on your device if 10 consecutive failed passcode attempts are made. Therefore, if a fraudster is trying to guess your passcode to access your account, your data is deleted from the device after their 10th failed attempt. It is recommended to only enable ‘Erase Data’ if you have a recent back up of your device stored in the cloud.
- Go to Settings, then click Face ID & Passcode.
- Enter your device passcode.
- Turn on Erase Data.
The Content and Privacy Restrictions setting allows users to manage and limit access to certain content and features. This feature is designed to manage what your children can access on their device. However, it can also be used to further secure your account from thieves.
There are settings you can alter to add the requirement for a secondary passcode when wanting to make changes to your account, such as your Apple ID password. Fraudsters are less likely to see you input this second passcode on your phone, making it harder for them to lock you out of your own account if they have stolen your device.
Note that you may need to set up a screen time passcode if you have not already. Also, if your account is part of a Family, where you are not the organiser, you will not be able set up a passcode. You will have to ask the organiser of the family to set it up and tell you the passcode. Only then can you make the change.
If you want to make changes to your account, turn off Content & Privacy Restrictions with your Screen Time Password. Refresh the Settings App. Make your changes, then turn Content & Privacy Restrictions back on.
- Go to Settings, click Screen Time, then tap Content and Privacy Restrictions.
- Turn on Content & Privacy Restrictions.
- Go to the ALLOW CHANGES TO: section and change Passcode & Face ID and Account to Don’t Allow.
Find My iPhone allows you to locate your device from other devices, this can help authorities locate your phone if it is stolen.
- Go to Settings, click “Your Name,” tap Find My, then select Find My iPhone.
- Turn on Find My iPhone.
You can then turn on the following settings. Find My Network allows your device to be located even when offline and Send Last Location means when your device’s battery gets low, it sends the last location to Apple.
- Turn on Find My Network
- Turn on Send Last Location
You can also share your device’s location with your friends and family. This will enable your family and friends to be able to help you track down your phone.
- Go to Find My app, click Me in the bottom right corner.
- Turn on Share My Location.
- Next, tap People in the bottom left corner, and press the + symbol to reveal a drop-down menu.
- Here you can add your other devices, such as AirTags, to see their location. You can also click Share My Location menu and then type the phone numbers of the trusted individuals you would like to share your location with.
Once you have selected the phone numbers, click send and select how long you would like to share your location. It is recommended to share your location indefinitely with your family so they can always help you locate your device.
Your International Mobile Equipment Identity (IMEI) number is a unique identifier for a mobile phone, which can help you track your phone if it is lost or stolen.
- Go to Settings, click General, then tap About.
- Scroll to IMEI and write down the corresponding number somewhere other than on your device.
Two-Factor Authentication adds the requirement for a second identification method when signing into your iCloud account. To set it up you must add trusted devices and phone numbers which will be used to verify your identity when signing in.
Key point: Have a second trusted device that can receive two factor authentication codes so you can still access your data from another device in case your primary device is lost/stolen.
- Go to Settings, click “Your Name,” tap Sign-In & Security, then select Two-Factor Authentication.
- Click Add a trusted phone number and follow the on-screen instructions.
You can change your accounts password to make it stronger or change it if it has been compromised.
- Go to Settings, click “Your Name,” then tap Sign-In & Security.
- Click Change Password and follow the on-screen instructions.
Hide your notifications from others. Turning this on adds the requirement for the user to use biometric ID to view notification previews that appear on the lock screen. This could protect some of your sensitive information and messages from being viewed by others.
- Go to Settings, click Notifications, then tap Show Previews.
- Select When unlocked.
Auto-Lock turns off the display when you leave the phone unlocked and do not use it for the length of time you have selected. Do NOT select Never, as this means your device will only lock when you press the off button. If you leave your phone alone by accident you will want it to automatically lock so people cannot access your device.
- Go to Settings, click Display & Brightness, then tap Auto-Lock.
- Select a length of time. 30 seconds is recommended.
It is important to keep your apps updated with the latest security patches as these updates often include fixes for vulnerabilities that criminals can exploit.
- Go to App Store, click your “Profile icon” in the top right corner.
- Click Update All. If there is no “Update All” option, your apps might all be up to date.
It is important to keep your device updated with the latest security patches as these updates often include fixes for vulnerabilities that criminals can exploit.
- Go to Settings, click General, then tap Software Update.
- On this page it should tell you whether your iOS is up to date or not. If there is an update available, you must install it.
- To begin the update, you will need to be connected to Wi-Fi and have at least 20% battery charge or have your device plugged into a power source.
- Once this is done, click Update and then follow the on-screen instructions.
It is recommended to turn on automatic updates, as this will help you keep your device up to date with the latest security patches.
- On the Software Update page, click Automatic Updates.
- Turn on all three options.
These are some of the important options, but do turn off as many as you can, to increase your device security. This setting requires the user to input the device passcode or use biometric ID, to gain access to the features when the device is locked.
When your phone is locked there are some features that can still be accessed. It is recommended that you turn at least some of these features off so that the user is required to unlock the device to gain access to them.
- Go to Settings, click Face ID & Passcode, then scroll to the ALLOW ACCESS WHEN LOCKED: section.
- Turn off the features that you would not like users to be able to access without unlocking the device. Below are some options that are recommended to be turned off:
- Control Centre is the quick-access menu that lets you manage settings like Wi-Fi, brightness, music, etc. Thieves will want to access this to turn airplane mode on to prevent device tracking. Note that thieves can still power off your device.
- Home Control lets you manage your smart home devices, like lights, thermostats, and locks.
- Wallet contains your bank cards, membership cards, and tickets for things like flights and events.
- Accessories – these can only connect to your device if your device has been unlocked in the past hour.
- Reply with Message – Some thieves may try to defraud your family and friends by impersonating you using your own contact number.
- Return Missed Calls – Some thieves may try to defraud your family and friends by impersonating you or social engineer them by using your own contact number.
Hiding an app stops it from being visible or easily accessed by others unless they can unlock your iPhone using Face ID, Touch ID or your passcode. Even when an app is hidden, its name may still appear in certain areas such as Screen Time, Battery Usage under ‘Settings’ and your App store purchase history.
It is important to note that built-in apps cannot be hidden - only apps downloaded from the App Store can be. Additionally, apps set as the default web browser or marketplace (in the EU) cannot be hidden.
- Go to your Home Screen
- Find the app you want to hide
- Press and hold the app icon until a menu appears
- Select Require Face ID (Or Touch ID or Passcode)
- Tap Hide and Require Face ID (Or Touch ID or Passcode)
- Authenticate using Face ID Or Touch ID or Passcode, then tap ‘Hide App’
The app will be removed from your Home screen and placed in the hidden folder at the bottom of the App Library.
To unhide your app, go to the App Library and open the hidden folder, then authenticate using Face ID Or Touch ID or Passcode to access the app. Press and hold the app, select the option to remove the authentication requirement and confirm – this will return the app to the App Library.
A SIM lock on an iPhone is a restriction set by a mobile network provider that limits the device to only work with SIM cards from that specific carrier. This means you cannot use a SIM from another network until the phone is unlocked.
- Open the Settings App
- Tap Cellular
If you have an iPhone with a single SIM or e-SIM:
-Tap SIM PIN
-Turn the SIM PIN on or off
If you have an iPhone with dual SIM or e-SIM:
-Select the number you want to change
-Tap SIM PIN
-Turn the SIM PIN on or off
If prompted, enter your SIM PIN.
If you haven’t set one before, use the default PIN provided by your network. If you are unsure of the default PIN, do not guess it and instead contact your provider directly.
Manage what you share to specific people and apps. The following setting allows you to review your account security, quickly and easily.
- Go to Settings, click Privacy & Security, tap Safety Check, then click Manage Sharing & Access.
- Press Continue, then follow onscreen instructions.
Privacy Protection on Mail hides your IP address and loads remote content privately in the background, even if you do not open the message, making it more difficult for senders to track your mail activity.
- Got Settings, click Apps, then tap Privacy Protection.
- Turn on Protect Mail Activity.
Use this to immediately stop sharing all information, to protect your data from individuals and apps.
- Go to Settings, click Privacy & Security, tap Safety Check, then click Emergency Reset.
- Key in your passcode or complete the biometric ID scan.
- Tap Start Emergency Reset, then click Reset People & Apps.
- Select an option, depending on whether you want a full reset or not, then follow onscreen instructions.
Lockdown Mode should be turned on if you believe you are being targeted in a cyberattack. Apps, websites, and feature functionality will be limited, and some experiences may be completely unavailable. This is to reduce the attack surface that could potentially be exploited.
- Go to Settings, click Privacy & Security, then tap Lockdown Mode.
- Click Turn On Lockdown Mode, then follow onscreen instructions.
If your phone has been lost/stolen, you should mark your device as lost. This will lock your device with your passcode, also payment cards and passes that you use with Apply Pay will be suspended.
- Go to Find My app or https://www.icloud.com/find/, then sign in, if required.
- Click Devices, select the device that is lost/stolen.
- Tap Lost iPhone and then follow the onscreen instructions.
Contact Arbuthnot Latham immediately on 020 7012 2500 if your device has been lost/stolen. With this information we can remove your cards from digital wallets, stop OTPs from being sent to that device, and block thieves from being able to access your banking applications.
A Recovery Contact is a trusted person who can help you get your account and data back if you lose access to your Apple ID. The trusted person does not have access to your account.
- Go to Settings, click “Your Name,” tap Sign-In & Security, then click Recovery Contacts.
Select Add Recovery Contact and then follow the onscreen instructions.
A Recovery Key is a 28-character code that you can use to help reset your password or gain access to your apple account.
- Go to Settings, click “Your Name,” tap Sign-In & Security, then click Recovery Key.
- Tap Continue and then follow the onscreen instructions.
- When the Recovery Key is displayed write it down on paper and store it safely.
- Confirm your recovery key to finish setup.
Adding a Legacy Contact can allow trusted individuals to access your data after your death.
- Go to Settings, click “Your Name,” tap Sign-In & Security, then click Legacy Contact.
- Tap Add Legacy Contact, then select a trusted contact.
- Follow the onscreen instructions.
Complete regular backups in case your phone is either lost, stolen, or broken. Backups store your data in the Cloud. This allows you to access your data from other devices and restore it onto new devices when you find a replacement. Turning on Back Up This iPhone will enable your device to be regularly backed up automatically when it has a connection.
- Go to Settings, click “Your Name,” tap iCloud and then iCloud Backup.
- Turn on Back Up This iPhone.
- If your device has not been backed up recently, press Back Up Now.
Need help?
Get direct support from Apple:
Contact - How to Contact Us - Apple (UK)
This contains the links to Apple support and what to do if your phone is lost/stolen. To find these quickly on a laptop press ‘Ctrl + F’ and search for either stolen’ or ‘Apple support’ in the bar that appears.
- Apple support - Apple Support
- Find your lost iPhone or iPad – Apple Support (UK)
DISCLAIMER
The information and advice contained in this guidance is for general information purposes only. Whilst we have made every effort to ensure the contents of this guidance are reliable and current, we are not responsible for its completeness or accuracy, or for the results obtained from the use of the information it contains.