Your iPhone has a MAJOR security problem (5 tips to keep you safe)

Поділитися
Вставка
  • Опубліковано 29 тра 2024
  • The iPhone has a problem, and it's one that could impact absolutely any of the over 1 billion iPhone owners out there including you, it has the potential to be catastrophic if you're targeted, and Apple seem to be either reluctant, or unable to do much to fix it. In this video, I'm going to explain the problem to you, and give you 5 practical tips that you must be using to keep yourself safe.
    📖 Want the PDF for this video? Become a Channel Member!
    Join via Buy Me a Coffee - geni.us/jAGpK
    Join via Patreon - geni.us/a0o5
    Join via UA-cam - geni.us/GCSpFOJ
    📧 Want a FREE weekly dose of Tech News, Hints and Tips? Sign up for my newsletter!
    eepurl.com/h7MWfv
    ☕️ Getting value from these videos? Want to support the channel? Buy me a coffee! www.buymeacoffee.com/properho...
    🖇 Get the items I use in my office - kit.co/ProperHonestTech/my-de...
    📹 Get my Video Production gear - kit.co/ProperHonestTech/my-vi...
    As an Amazon Associate I earn from qualifying purchases.
    🔗 WSJ iPhone Passcode video • Apple’s iPhone Passcod...
    Follow me on my socials!
    Instagram - / properhonesttech
    Twitter - / properhonesttec
    Chapters;
    0:00 - Intro
    0:23 - The Problem
    8:16 - What should you do?
    12:33 - End
  • Наука та технологія

КОМЕНТАРІ • 810

  • @ProperHonestTech
    @ProperHonestTech  Рік тому +22

    📧 Want a FREE weekly dose of Tech News, Hints and Tips? Sign up for my newsletter!
    eepurl.com/h7MWfv

    • @Damariobros
      @Damariobros Рік тому

      My iCloud account still has the old version of 2-Step Verification, the one with the old secret questions system. Whenever I attempt to go into any settings in my iCloud account, it asks for 2 random answers of the 3 tied to my account, in addition to entering the passcode for the account change itself.
      Apple needs to bring back this extra verification in some form, an extra verification that pops up when attempting to access the iCloud account settings sub-menus.

    • @reardelt
      @reardelt Рік тому +1

      There's an easy fix. Just use Face ID in public. Why use passcode when there are prying eyes everywhere? What's the point of Face ID if you don't want to use it?

    • @Damariobros
      @Damariobros Рік тому

      @@reardelt Some people aren't tech savvy enough to use it, others might not want to give their face to Apple. Also there are a number of things that can trigger Face ID to be disabled and the device requires the passcode to unlock, and there are some apps that can ask for a passcode entry but not Face ID. Every person's circumstance is different, and there are a number of people who might, at one point or another, need to enter their passcode in public. Those are who these attackers target.
      Apple needs to bring back asking for verification to access sensitive Apple ID settings from Apple devices.

    • @reardelt
      @reardelt Рік тому

      @@Damariobros well. Face Id cannot be disabled unless you specifically disable it. There are no apps that reject using Face iD

    • @dkrconch
      @dkrconch Рік тому

      Nine minutes into the video he says to go to settings, Face ID and passcode, change e passcode. My iPhone doesn’t have that. Why?

  • @williambunting803
    @williambunting803 6 місяців тому +25

    The other thing that is important is to take a screen shot of the “about” page, specifically the IMEI number(s) and keep that on some one else’s phone. This is the number that the cell system uses to track where your phone. You send this number to the Police and they can see where your phone is and block it out of the cell system.
    This used to be a thing we all should do but it is forgotten.
    I am going to do what the previous commenter said too.

    • @jbcentral1545
      @jbcentral1545 Місяць тому

      The IMEI number should be printed on a sticker on the box the phone shipped with. At least that’s how it used to be, I’m not sure if phones still have their EMEIs printed on the box

  • @CB-yh3ov
    @CB-yh3ov Рік тому +106

    The problem is not the passcode, but that you can reset your apple-ID with it rather than to type in your apple-ID password.

    • @wisdomyaw03
      @wisdomyaw03 Рік тому +5

      That's because in the event that you forget you AppleID password you can still be able to access it

    • @asadullahilyas
      @asadullahilyas Рік тому +22

      @@wisdomyaw03 in case you forgot, Apple should send you a link to change your password to your email. Like the rest of the sane world is doing.

    • @asadullahilyas
      @asadullahilyas Рік тому +3

      @@wisdomyaw03 so instead of an SMS, it should be an email.

    • @wisdomyaw03
      @wisdomyaw03 Рік тому +9

      @@asadullahilyas There is the option for email as well but it's still coming to the same phone, right? So the point still stands

    • @Patricia-kk8tr
      @Patricia-kk8tr Рік тому +3

      This is why Apple has brought in security keys for changing the Apple ID - to give a secure alternative for iPhone apps. But until it’s better supported by banks, it is rather expensive just for the Apple ID. Also it’s designed for adding to your keyring.
      Why would you need or encourage someone to carry it on their person when it is best kept safe away from the iPhone?

  • @ravi06197
    @ravi06197 Рік тому +266

    Apple should bring back Touch ID as a secondary unlock system which can be on the side button, similar to the 10th gen iPad top button. Maybe starting with iPhone 15. Passcode should be used only as a last resort and that too when you are not in a crowd.

    • @ProperHonestTech
      @ProperHonestTech  Рік тому +51

      Yeah I've thought this for a while now. I know that the technology isn't there yet for under-display Face or Touch ID, but why not built into the power button?

    • @levintage
      @levintage Рік тому +1

      It wouldn't work with a case though

    • @ProperHonestTech
      @ProperHonestTech  Рік тому +17

      Good point, although depends on the case (I have a Pitaka case that leaves the side buttons exposed).

    • @ravi06197
      @ravi06197 Рік тому +10

      @@levintage I don't think it is an insurmountable problem. Apple - the master of design - would have to do some testing and then provide the specs to the case manufacturers. And perhaps have the side button project 1 mm or so further out.

    • @wisdomyaw03
      @wisdomyaw03 Рік тому +4

      Adding TouchID to the iPhone doesn't prevent this situation by any means

  • @josephfredbill
    @josephfredbill Рік тому +56

    Also, I have complained to Apple for ages that it makes no sense for a two factor code to be sent in a message to the device you request it on. It *should* be sent to your other devices excluding the one its requested on. Implementation of this would be easy - either a special category of message or, since they read the messages (are they encrypted?) so the system can know its a 2fa code they can pre-empt and disable delivery for such a message to the requesting device.

    • @josephfredbill
      @josephfredbill Рік тому

      @@rorybraxton it isnt safe because the device could be stolen and broken into. Its tough for people who have only one apple device admittedly but many people have several. And given that Apple knows what devices you have it would be easy to work around for those people that *do* have multiple apple devices. In fact it would encourage people to buy additional devices, which you might not like bu5 apple surely would. You can blame people for not being deterministic automatons of course but that wont improve anything or change anybody.

    • @astra1360
      @astra1360 Рік тому +4

      @@josephfredbill that’s an insanely dumb idea. You would never be able to do anything on the go if you don’t have your iPad or MacBook with you. 2fa is there to prevent people from remotely hacking your account. Leaking your passwords and having your phone snatched is a very very rare occurrence and not fully preventable

    • @josephfredbill
      @josephfredbill Рік тому

      @@rorybraxton so those who do have them stolen are unimportant because most people who called you hadnt had them stolen ? I dont mean to be rude but what you have written does no credit to Apple for who they choose to employ. Is that your logic - that what you dont see doesnt exist ? Dont answer that - there’s no point in this interchange. You just want to be right - well logic and analysis does not support you.

    • @josephfredbill
      @josephfredbill Рік тому +1

      @@rorybraxton so why are you arguing that being able to have 2FA codes sent not to the device on which they were requested where a user has more than one device on the grounds that “having your phone snatched is a very very rare occurrence” - your words. 1. Its not rare, 2. Its not an unimportant case. Sure users forget passwords, so what - that doesnt make 1 and 2 in my statement here false. Ok I just noticed there are two people here - I quoted you here from @astra1360’s response.

    • @josephfredbill
      @josephfredbill Рік тому

      @@rorybraxton my apologies for reading @astra1360’s response as if it were yours. I agree its a tough problem. I still think that Apple could have a user-election (ie preference) to not have 2FA codes sent to the device on which it is requested where a user wants that. To @astra1360 - your response I percieve as both rude AND ignorant. If you want to choose to take that risk then do so but there is no need to impose it on everyone.

  • @rachelio33
    @rachelio33 Рік тому +11

    Scary indeed! Thank you so much for this video and your suggestions. Especially not being aware of the problem is the biggest danger.

  • @tesla-spectre
    @tesla-spectre Рік тому +16

    Fully support your suggestions. My rule of thumb is not to use passcode ever when in a public place. Even udring Covid I would rather wait for login until out of a group of strangers then while in it.
    What I do not understand is: to access passwords on Safari on the computer you need the admin password but you do not on the phone. Why not use the admin password also on the phone

  • @mennaallahmohsen
    @mennaallahmohsen 2 місяці тому

    I really feel safe when I listen to you and when there is a problem and I try to solve it calmly. You really help me with these videos. Thank you.

  • @blainecooper6564
    @blainecooper6564 Рік тому +27

    Thanks for making valuable educational content! Really appreciate you, man.

  • @katebeedot6964
    @katebeedot6964 Рік тому +3

    Just a simple security question to a well chosen answer would do the trick

  • @srbs73
    @srbs73 Рік тому +3

    Really good. A real eye opener and will be taking action this weekend.

  • @tomaetomahtoe3819
    @tomaetomahtoe3819 Рік тому +6

    Thank you for this informative video. I don’t imagine such a situation happening to me but I can never truly predict the future. I do alway use face id because of how convenient it is but it harms no one to take extra precautions to prevent the worst from happening.

  • @turist733
    @turist733 Рік тому

    Thank you very much. You’re really something. Your videos make difference. This is so very important and a lot of people need to listen/hear what you say. Please continue your good work. ❤️

  • @Ricky-ln6rt
    @Ricky-ln6rt 9 місяців тому +1

    Great video, very well put together and explained, thanks!

  • @milanchristi7939
    @milanchristi7939 Рік тому +2

    Sound advice! Thank you!

  • @alexandraross4787
    @alexandraross4787 Рік тому +2

    Good data and advice, thanks!

  • @GomathinayagamN
    @GomathinayagamN 9 місяців тому +1

    Thanks for the amazing content. Finding it very helpful!!

  • @wiriadinata
    @wiriadinata Рік тому +1

    thanks for the sharing. just realize this weak point at my device

  • @Mary-ow2nq
    @Mary-ow2nq Рік тому +1

    I found this video extremely helpful and i will be using the Face ID from now on going forward. Thank you

  • @Rogar0
    @Rogar0 Рік тому +2

    yep; totally agree! I have very early on chosen an alphanumeric code with more than 12 digits & ciphers with special characters! It is sometimes a ‘bummer’ when my biometric doesn’t work, but I feel it’s worth it! I also use a password manager rather than putting all my ‘eggs’ in keychain, but nevertheless use it now and again! I also use Proton mail and Signal on my phone! I try to maintain a step before to ensure to make as difficult as possible to not get ‘Virtually’ mugged! But I am well aware these are just improved steps to keep up to speed! Thanks for your Videos, I have picked up many tips from your channel! 👍😎

  • @Web3Prep
    @Web3Prep Рік тому +1

    7:18- you hit the nail on the head there. So true

  • @marlonsouza9224
    @marlonsouza9224 8 місяців тому

    Thanks for the great and important video. I changed everything here, based in your recommendations. I really appreciated it!

  • @prabhakarrao4922
    @prabhakarrao4922 7 місяців тому

    Many thanks. Great advice.

  • @kr1221E
    @kr1221E Рік тому

    Thank you for this video 🙂

  • @jaysmokin
    @jaysmokin Рік тому

    Thanks for letting us know. Can’t wait to try this on somebody

  • @flyshacker
    @flyshacker 8 місяців тому

    Outstanding video! Got me to change my ways! Many thanks!

  • @jkennan
    @jkennan Рік тому +32

    Thanks for highlighting this. Lost a phone on a train some years back and, as far as I'm aware, it wasn't actually compromised as I've always used a 10 character alphanumeric code. By the time I'd got home to check, whoever had picked it up had already switched it off as Find My couldn't locate it (and never did subsequently). Battery was fully charged when I left home so switching it off it was a deliberate attempt to avoid detection.

    • @super-ibby
      @super-ibby Рік тому +8

      Fair, but this may offer a false sense of security. If I’m not mistaken, the WSJ piece mentioned that the thieves may have recorded the victim entering their passcode. So length and complexity will be of little deterrence/consequence. Just a heads up!

    • @SisterFromAnotherPlanet
      @SisterFromAnotherPlanet Рік тому

      @@super-ibby I believe he said they record the PIN, and that complexity IS a deterrent because it's much harder to get a 10+ alphanumeric code right

    • @mathmanchris666
      @mathmanchris666 Рік тому +3

      @@super-ibby But lets be honest, if you are so consumed in your phone that you don't notice people around you recording you then at that point I mean, oh well. I mean yeah it's bad but you have to have some sort of awareness around you. Also this whole issue can be solved by just using Face or Touch ID while in public. Why are people so against biometric forms of identification

    • @kevinmiles5770
      @kevinmiles5770 Рік тому +1

      @@SisterFromAnotherPlanet not if its being video recorded.

    • @Kenna198
      @Kenna198 11 місяців тому

      @@mathmanchris666 because of the “Illuminati” lol

  • @Arsalan_2210
    @Arsalan_2210 Рік тому +29

    great video tom! thank you for making such great content for us. I wanted to share an idea though... we do need an app lock feature on iPhones and there should be a feature that asks for a passcode whenever you try to turn off your iPhone. That way, if your phone is stolen and if you have an E-SIM, it would be nearly impossible for the thief to turn off your iPhone. And because of this you can easily trace the location of your iPhone. :).

    • @mayorplayz
      @mayorplayz Рік тому +2

      Your iPhone is still traceable even if its turned off btw, they can only turn that off by tapping the "Allow this iPhone to be findable when turned off" after getting to the shut down screen and entering your passcode

    • @delta-a17
      @delta-a17 8 місяців тому

      Hard reset on devices is extremely important since occasionally these devices lock up or freeze. Without the ability to hard reset the device it's essentially bricked. Also any smart thief would drop the phone in a faraday bag making it invisible until the battery runs out or simply take out the battery.

  • @JohnMacphersonAllan
    @JohnMacphersonAllan Рік тому

    Thanks Tom great and informative video cheers

  • @richardrust9532
    @richardrust9532 Рік тому

    Thank you for the info!

  • @tesla-spectre
    @tesla-spectre Рік тому +2

    Brilliant and important video

  • @2triangles
    @2triangles Рік тому +1

    Thank you for a great video.

  • @movingloz
    @movingloz 7 місяців тому

    Wow 😮. What a great vid. So much important info. Thanks 🙏 heaps.

  • @wfodavid
    @wfodavid 10 місяців тому

    Scary stuff. Thanks making adjustments.

  • @rosestines66
    @rosestines66 Рік тому

    Thank you for sharing your knowledge about this topic very useful information that I didn’t know about n I understand that It could happen to me or anyone n I’m just glad to know about it now thanks again

  • @andyfx
    @andyfx Рік тому

    Great video. Thanks.

  • @allezvenga7617
    @allezvenga7617 Рік тому

    Thanks for your sharing

  • @honeymonstermix
    @honeymonstermix Рік тому +2

    Thank you for this very useful information. It confirms some things that I already suspected ( I have /do no banking info on phone or in the cloud) & made solid suggestions about safety.

    • @jannertfol
      @jannertfol 3 місяці тому +3

      That's my approach as well. My phone is a Samsung, which I use ONLY for phoning and texting. My iPad is used only for emails and net surfing ...and my email programme is accessed via my browser, and I have to sign in and out of it every time. I don't carry ANY important data on either device. I do online banking, but ONLY from my desktop Mac at home. I don't use iCloud for anything at all. I try to keep my devices as separate from each other as possible. Apple doesn't like this, of course, and is constantly 'reminding' me to sign into the Cloud, to enable 2-factor authentication, etc. I've resisted thus far.
      I think we've fallen too easily into the 'convenience' thing. I prefer not to keep all my eggs in one basket.

  • @swanstevenson822
    @swanstevenson822 Рік тому +2

    I have a security background and as recently migrating from Android phone to iPhone. I noticed this vulnerability right away. Fortunately, I have always relied on third-party software for backup storage and password management, so will continue this approach. Made me acutely aware that now I have a target on my back as an iPhone user. Best thing to do is be very discrete about where and when you use this device - and change login method based on your vulnerability. Before going to a bar or on vacation, change to fingerprint or face recognition - you can always change it back later.

  • @mohammedlayeekamara3469
    @mohammedlayeekamara3469 9 місяців тому

    Tnx for this education!😊

  • @justinvandervort7581
    @justinvandervort7581 Рік тому

    Very good video! Lots of people need to watch.

  • @andy70d35
    @andy70d35 Рік тому +1

    Very informative video, hopefully people will listen to you.

  • @1TexasKid
    @1TexasKid Рік тому +57

    Glad you made this Apple security warning. I am shocked that Apple is not doing anything to change it.
    Why not use a two device identification to prevent ID theft. The 2nd device would have the deciding authentication confirmation factor. Or call Apple to give verbal answers to preset authentication questions.

    • @dornus336
      @dornus336 Рік тому +13

      and how exactly should this work when you only have a single iphone?

    • @almarma
      @almarma Рік тому

      @@dornus336 There’s a very simple way to implement a solution: don’t allow to change the iCloud password unless you have a secondary device or answer a security question. That’s how it should be from the beginning. Yes, a thief can still rob your iphone and if they get to see your PIN code, they could get to the main screen, but they wouldn’t be able to lock you from your account or your photos and would not be able to unlock yourself from your own device. A friend of mine suffered this same kind of attack while on holidays and lost everything. All his photos and digital life connected to it, and Apple said to him they could do nothing to help him. That would really piss me off as I have more than 600GB of photos and videos and many personal documents there too, plus a lot of purchased apps. Security experts say that your security is only as safe as your weakest point. A simple 6 numbers code is a really weak point for your whole iCloud account.

    • @lesliebenjamini5841
      @lesliebenjamini5841 11 місяців тому

      So if I only use my iPad at home how do I set it up as the device to have the deciding authentication?

    • @andrewmorgan1819
      @andrewmorgan1819 10 місяців тому

      Or just make you input your AppleID password to change your password and to add new biometrics.

    • @mysticdragon77
      @mysticdragon77 8 місяців тому +2

      Apple has added the option to add physical keys that are required to change your Apple ID password. This is the highest security you can add. It’s not promoted though but I’ve added 2 security keys to my phone.

  • @egyoac
    @egyoac 7 місяців тому

    I use Screentime restiction. Works like a charm

  • @tommacdougall
    @tommacdougall Рік тому +3

    Enjoyed your video, your thoughts on security keys?

  • @tellmestraight
    @tellmestraight 7 місяців тому

    Thank you!

  • @legendpete8422
    @legendpete8422 Рік тому +4

    Scary, but really helpful!

  • @billyg8614
    @billyg8614 Рік тому +35

    Great video Tom! IMO, In order to change your iPhone passcode, Apple should require you to enter your Apple ID password.

    • @SisterFromAnotherPlanet
      @SisterFromAnotherPlanet Рік тому +1

      You can choose that in settings!

    • @Tengaii
      @Tengaii Рік тому

      @@SisterFromAnotherPlanet Where?

    • @jamesosullivan7969
      @jamesosullivan7969 11 місяців тому

      Wouldn't make a difference if your AppleID password is in your keychain, which it is for most people.

    • @SisterFromAnotherPlanet
      @SisterFromAnotherPlanet 11 місяців тому

      @@jamesosullivan7969 Mine only fills in with Face ID.

  • @Linkzelda99
    @Linkzelda99 Рік тому +3

    It’s nice to see a video of what was in the proper weekly

    • @ProperHonestTech
      @ProperHonestTech  Рік тому +3

      It's not something I'm going to make a habit of, but I came away from writing last week's newsletter thinking 'this really needs a video'...

    • @Linkzelda99
      @Linkzelda99 Рік тому +1

      @@ProperHonestTech Well your videos are fine either way and it’s always so exciting when your newsletter comes out on fridays

  • @anelamilne3225
    @anelamilne3225 Рік тому

    Thank you. This scared me😮. But I got valuable info from you. Thank you. I will use this I have a tinted screen cover on my iPhone too.

  • @martincoutts6747
    @martincoutts6747 Рік тому

    Great content, good job.

  • @Heartford
    @Heartford Рік тому

    Very helpful video!

  • @rahil4786
    @rahil4786 11 місяців тому

    Thanks

  • @thomascrown3816
    @thomascrown3816 Рік тому

    Fantastic! Thanks

  • @runshoottech
    @runshoottech Рік тому +10

    My passcode for years now has been a whole sentence and my friends always thought I was just being over protective, now there is this threat and they see more of a reason to have a longer password.

    • @tjwash5118
      @tjwash5118 Рік тому +1

      Mine is my favorite singer, my friends all know my favorite singer because I talk about her all the time. If I wrong one of them and they get my phone it’s all over, I can’t burn any bridges.

    • @runshoottech
      @runshoottech Рік тому +2

      @@tjwash5118 lol, keep those bridges intact my friend 😂

  • @thina8052
    @thina8052 Рік тому

    Thanks for the information ☺️ What if I use Advanced Data Protection? Wouldn’t that help a lot?

  • @michaels7499
    @michaels7499 9 місяців тому +1

    I set my iCloud sign in on a YubiKey. I also go into Screen Time and set not allow to account changes and a few other things and set up a different pin for screen time. That locks out my profile on device unless they know that pin.

  • @olaniyanmichael640
    @olaniyanmichael640 11 місяців тому

    Good info.

  • @Dk-qf8dd
    @Dk-qf8dd Рік тому +10

    Biggest thing, and not that hard of a change, the access code to your Apple Device should be for access only. Not for changing passwords or settings. And Settings > Password should be behind a code/password/biometric that is NOT the access code. BTW - a lot of this also affects Android. You’re not safe there either.

    • @suqmaddiqq
      @suqmaddiqq Рік тому

      For Android it depends on the OEM. Samsung have countermeasures for a lot of these.

  • @steveh7216
    @steveh7216 Рік тому +6

    *Excellent presentation!* 🎥👍
    _Hi Tom, I'm interested in what you think of these ideas..._
    1.
    Why don't Apple simply have a setting option where the phone needs double verification! (Face ID and Pin Code). It may be a slight inconvenience, but ladies whom get targeted most if they go to night clubs, can simply enable the feature before they go out.
    2.
    The other idea is if they own an Apple Watch, that the watch has a feature that if the phone is a distance more than say 20 feet away; that the phone will instantly "Lock Screen". (no matter what mode it's in). What do you think? 😊

  • @raidraid6672
    @raidraid6672 Рік тому +7

    Many thanks for yet another calmly and concisely articulated informative video. How do you feel about using Screen Time -content and privacy restrictions - to allow/don't allow passcode changes and account changes as a security measure to be followed by iPhone owners until Apple figures out a way to sort out this issue?

    • @jaworq
      @jaworq 10 місяців тому

      Screen time passcode reset resets also Apple ID password so.... quite useless

  • @jesusmagas7096
    @jesusmagas7096 10 місяців тому

    Enjoyed the video

  • @elisabethlafontaine8979
    @elisabethlafontaine8979 3 місяці тому

    Thank you for this video. I do use Face ID but for other things I may key in an alphanumeric code. I will now make sure I shield these “events” from prying eyes.

  • @sarahphillips295
    @sarahphillips295 Рік тому

    Great video. I use FaceID or the fingerprint scanner on my iPad mini for this exact reason. Apple does need to give users the option to have additional layers of security enabled before an Apple ID password can be changed. Just a device password is not enough enough. This story is a perfect example of what can happen if that password is able to be changed too easily. If you don’t know the old password, the only way it should be able to be reset is with a link sent to the iCloud email or at an Apple Store with government ID. It is smart to have a strong password and if you ever have to enter it in public, never enter it in a crowd and be hyper aware of who is around you.

    • @boobee_nyc
      @boobee_nyc Рік тому +1

      I use Face ID exclusively but there are very few instances that Face ID fails for whatever reason and the phone prompts for the passcode. While I'm cautious about letting anyone see me enter it but dang I never realized how much damage someone could do knowing it. This is most certainly eye opening. Wow!

  • @adammachin
    @adammachin Рік тому +7

    Odd for them to not require the existing password in full to change it.

  • @btbb3726
    @btbb3726 5 місяців тому

    Thank You! 👍🏻
    I’ve been using a six digit code on mine for years.

  • @WNCDude
    @WNCDude 7 місяців тому +1

    It would be helpful to have passcode numbers actively change their positions to make it more difficult to ID the numbers. I saw this years ago at a parking lot entrance.

  • @shrikantbmali
    @shrikantbmali Рік тому +2

    Some fixes: to change iCloud password and pincode apple must mask for the password instead of only the pincode.
    Or have an alternative more secure secondary pin thats only required when one wants to change critical details like pin and iCloud password.

  • @clivewuest8529
    @clivewuest8529 Рік тому +29

    Great channel you have here Tom, and this video is very informative. A chain is only as strong as its weakest link, and Apple have one here, but surely to limit the damage that can be caused is to request your current Apple ID password if you want to change your Apple ID rather than the pin number you use to unlock your phone. That way at least you will not loose control of your Apple ID and you will still be able to remotely wipe the phone. Nobody enters thier Apple ID password in public, so that would render having your pin number useless as the legitimate owner will still be able to wipe their phone. Simple fix for Apple I would have thought unless I am missing something. Clive

    • @wisdomyaw03
      @wisdomyaw03 Рік тому +1

      What if you've forgotten your AppleID password?

    • @clivewuest8529
      @clivewuest8529 Рік тому +5

      @@wisdomyaw03 Well keep it safe somewhere else and you can always retrieve if you forgot. I would rather that than have all my personal info and bank accounts compromised

    • @wisdomyaw03
      @wisdomyaw03 Рік тому +4

      @@clivewuest8529 Well, while it's a great point, the thief in this case would still be able to access your icloud because they could login from the web, obtain SMS verification code sent to the same phone and change the password.

    • @clivewuest8529
      @clivewuest8529 Рік тому

      @@wisdomyaw03 mmm. Good point. Oh well prevention better than cure. Never enter your password in public at any time then and make is 6 digits or alpha numeric

    • @wisdomyaw03
      @wisdomyaw03 Рік тому +3

      @@clivewuest8529 That's 💯 exactly the point. The problem starts from your primary phone unlock password/passcode. The moment it leaves you, all your digital life is exposed. While we hope that in the future more advanced methods of preventing such occurrences are made, it's our duty to safeguard out own passwords.

  • @lorimccoy5321
    @lorimccoy5321 Рік тому +2

    Amazing content. Everyone’s worst nightmare experience

  • @checkout62
    @checkout62 Рік тому

    Thanks will subscribe

  • @alicias2915
    @alicias2915 Рік тому

    Also using a security screen protector helps also as you can’t see from even a short distance . I have one and love it. Someone next to you can’t see your screen.

  • @delwoodbarker
    @delwoodbarker Рік тому +1

    Thank you very much for your videos, especially this one. I thought I was more secure than I am with my poor passcode.
    Regarding secure files, I keep an encrypted disk image for my financial files. But I realize I want more of my files to be protected now.
    If I move files from my iCloud documents into a disk image file, then delete them from the unencrypted documents folder, what happens to the backups? Would someone be able to get my deleted sensitive files from backups in iCloud?
    I encrypt my Time Machine backups, and use an encrypted external drive when I can. What about my own backups in Time Machine? How long will my deleted files be recoverable there? Can I delete a file explicitly from my backups?
    Thanks again.

  • @davidwinters1432
    @davidwinters1432 Рік тому +1

    Thanks!

  • @lukewilson1092
    @lukewilson1092 4 місяці тому

    3:43 this is a little tip. you can use screen time to completely hide the FaceID page using a screen time passcode (which can be different from your main passcode) and go into content restrictions, scroll down, and change passcode changes. to disallow. plus, you can lock out the Apple ID settings by disabling account changes from this same page

  • @HopefullyNotYou
    @HopefullyNotYou Рік тому

    this is exactly why i loved touch id so much

  • @ones9638
    @ones9638 7 місяців тому

    You can use screen time passcode to lock access to icloud settings and passcode settings, as well as a lot of other useful stuff. definitely recommend setting up screen time.

  • @andybarnes1100
    @andybarnes1100 Рік тому +1

    Very good video - thanks.
    Possible solution for Apple (which you may have better access to than most subscribers to your channel) - change the position of each character on the numeric keyboard for the passcode each time it is accessed. I have seen this done on a POS device which needed a PIN code. Would stop most people from copying the passcode as it is often the pattern of what is pressed rather than the number itself that is memorised. An easy software fix which would stop a percentage of these cases from arising (wouldn’t stop the person who can remember a six digit passcode by numbers though 😕)

  • @AlexK-vp9jd
    @AlexK-vp9jd Рік тому

    That’s absolutely helpful info however I feel like it’s also teaching bad people how to do it. So scary how vulnerable we are. Thank you, but you are correct, this help us create a more secure password.

  • @JustAPersonWhoComments
    @JustAPersonWhoComments Рік тому

    2:21 ur actually right. Kind of, but the green screen is used by the 12 Pro instead.

  • @Flavius_Tanigoi
    @Flavius_Tanigoi 9 місяців тому +3

    Another way to prevent this from happening or at least a method to slow them down is as follows.
    Open Settings - Screen Time - Content & Privacy Restrictions - scroll down to Allow Changes - select don’t allow changes to passwords & account changes.
    Remember these guys probably know what they are doing but this should buy you enough time to be able to lock your phone and report it as stolen from the find my app.
    Hopefully this doesn’t happen to anyone here but it’s never to late to take these precautions.

  • @darkwolf41nite53
    @darkwolf41nite53 Рік тому +1

    So use the faceID an passcode would be the best correct!??

  • @ResearcherRyan74489
    @ResearcherRyan74489 10 місяців тому

    I use Proton pass to do password storing

  • @cordelearts
    @cordelearts Рік тому

    Thanks for telling me how to break into some phones.

  • @peglegpolly2
    @peglegpolly2 Рік тому

    I read something after this made the news advising us to go into parental controls and privacy and enable the option that the iCloud password could not be changed unless you have a code that only you would know. It does create inconvenience because you can’t select iCloud but you just go into that setting and key in your code. Does this look like a good option to you?

  • @iphonesecurity
    @iphonesecurity 3 місяці тому

    I made video on this too! Love your channel. The Wall Street Journal also has a great video on how they use the recovery key to permanently lock your recovery key. This happened to over 40 of my friends at our local bar, we identified the thieves but they never got arrested and made hundreds of thousands of dollars. This is very common and serious.

  • @robertsleight8013
    @robertsleight8013 Рік тому

    I am new to the iPhone was just wondering if it was possible to make it so that you only need a pass code to wake up the phone but a biometric access settings?

  • @robertcampbellii9787
    @robertcampbellii9787 10 днів тому

    what do you think of the new 'stolen device protection?

  • @nectar75
    @nectar75 Рік тому

    You can now use an alpha numeric passcode which allows you to have more robust and longer codes. Longer to get in to but more secure.

  • @Gengingen
    @Gengingen 3 місяці тому

    Disabling passcode outright would be the best option as even in the rare case FaceID fails to work, connecting to a computer with ITunes where the iPhone has been backed up before will allow for full restore up to the backup date? I think on balance, the benefits of enhanced security & the avoidance of the pain of having to enter excessively long passcodes having to very rare instance of having to restore the iPhone to the latest backup date

  • @davidbeckett1565
    @davidbeckett1565 Рік тому +1

    A fingerprint sensor on the lock button would be a good feature. Failing that, adding a security key (like a Yubikey) for 2FA is more secure than SMS.

  • @kellymeredithdc7436
    @kellymeredithdc7436 Рік тому

    I think that if you have 2 separate codes would be best. One to get in and another for accessing info on the phone. It would be 2 codes you would need to remember.

  • @boutrosboutrosboutrosboutros
    @boutrosboutrosboutrosboutros 3 місяці тому

    Great video. I hope this has been fixed by now, but prolly not

  • @BastionGT
    @BastionGT 13 днів тому

    You could also use screen time to add another “different” passcode to access Face ID and your Apple ID account to change the password.

  • @ravi.dasgupta
    @ravi.dasgupta 10 місяців тому +1

    Hope below steps will be useful to prevent the iPhone password change or iCloud password change even if someone knows your iPhone pin:
    Part A: Update you iPhone to latest iOS:
    Part B: Set screen time password:
    1. Go to Settings > Screen Time.
    2. Set screen time password.
    Part C: Lock password and account change:
    1. Launch the Settings app.
    2. Tap Screen Time → Content and Privacy Restrictions.
    3. Toggle on Content & Privacy Restrictions.
    4. Now, scroll down to the ALLOW CHANGES menu and choose Passcode Changes.
    5. Select the Don’t Allow option.
    6. Similarly, tap the Back button to go to the previous interface. Then repeat the same exercise for Account Changes.

  • @Nikalette100
    @Nikalette100 11 місяців тому

    I decided to make a wait time between Face ID and passcode since it happened immediately. I am testing with a minute to see if I like it. I love the thumb print on the IPad but there is no option for wait time, it will only leave immediate as an option. Is there a way to change this? I have an IPad 9th generation.

  • @jkoneill
    @jkoneill Рік тому +3

    Great content! You covered the face ID/ biometrics aspect. I get so frustrated with creators & Apple for that matter refer to face ID as great security when in reality it is just a convenient way to unlock your phone. The second it fails your phone will ask for the passcode. There has to be a better way. Perhaps touch ID that won't open your phone when failed. Thank you for the upload 👍

    • @fabsgwu
      @fabsgwu Рік тому +1

      It’s sort of the reverse: if you’re only using Face ID then people can’t glean your passcode. If it fails (try again?), but you have a very simple passcode and are not guarded about entering that code that’s where the risk comes in.
      The best course of action (now) is to use an alphanumeric code and treat it like entering a pin at an ATM. You can also optionally only use numbers with the alpha option, then the thieves wouldn’t know the length of code like on the 4 or 6 digit code options. Using screen-time and separate code to limit account changes can be a speed-bump to delay thieves from changing the iCloud password, but unfortunately this protection can be bypassed. Would-be thieves can also use strategies like asking to take a photo and squeezing the sleep/volume buttons as they hand the phone back to trigger passcode entry requirement to unlock-again, this is where careful passcode hygiene is most important. It should be pretty rare that a passcode is needed if you’re holding it right (to paraphrase Steve Jobs), but Apple definitely needs to make some security enhancements to protect against this problem.

    • @mathmanchris666
      @mathmanchris666 Рік тому

      Face ID only fails when you don't position your phone within view of your face multiple times. You have multiple chances to get it right. Just be competent and when it gives you that first failed, correct it accordingly please.

    • @jkoneill
      @jkoneill Рік тому

      @@mathmanchris666 not so. Face ID 'fails' / rejects every several days. It's not about positioning it's embedded to force user to enter PIN

    • @Nikalette100
      @Nikalette100 11 місяців тому

      I decided to make a wait time between Face ID and passcode since it happened immediately. I am testing with a minute to see if I like it. I love the thumb print on the IPad but there is no option for wait time, it will only leave immediate as an option. Is there a way to change this? I have an IPad 9th generation.

    • @darryllspalding9680
      @darryllspalding9680 11 місяців тому

      perhaps the international police could train more people in putting a stop to cyber crime. ther is an Irish felka on you tube who can hack the cctv systems of scammers, trying tonloot your grandmas savings(your maybe inheritence), cut off their hands ! Its the law for theft in a lot of these countries.

  • @jayroon
    @jayroon 3 місяці тому

    It’s also possible to enable screentime with a passcode and then under ‘restrictions’ to not allow passcode changes and / or account changes. That way you will have an extra layer of security in the form of a passcode that is different from the iPhone’s passcode.

  • @ompomromdom
    @ompomromdom Рік тому

    FIDO Yubikey - Would adding it to ios prevent that or not much ?

  • @paulissus8974
    @paulissus8974 Рік тому

    The incident you spoke of were the girl had her phone snatched was down to her not being careful enough when inputting her passcode, it’s not difficult to do so without letting others see you inputting.