CNN reported that a complicated but relevant method to take control of a user’s iPhone and permanently lock out the device is on the rise.
According to a recent Wall Street Journal report, some iPhone thieves are using a security setting, called a recovery key, that makes it nearly impossible for owners to access their photos, messages, data and more. Some victims also told the publication that their bank accounts were drained after the thieves used their financial apps.
It is important to note, however, that this type of takeover is difficult to pull off. A criminal would essentially need to see an iPhone user enter the device’s passcode — for example, by looking over their shoulder at a bar or sporting event — or by manipulating the device’s owner into sharing their passcode. And that’s all before they physically steal the device.
From there, a thief can use the passcode to change the device’s Apple ID, turn off “Find My iPhone” so their location can’t be tracked, and then reset the Recovery Key, a complex 28-digit number meant to protect its owners. is the code. From online hackers.
Apple needs this key to help reset or regain access to an Apple ID in an effort to strengthen user security, but if a thief changes it, the original owner won’t have the new code and will be locked out of the account.
“We sympathize with those who have had this experience and take all attacks on our users very seriously, no matter how rare,” an Apple spokesperson said in a statement to CNN. “We work tirelessly every day to protect our users’ accounts and data and are always investigating additional security against emerging threats like this.”
On its website, Apple warns that “You are responsible for maintaining access to your trusted devices and your recovery key. If you lose both of these items, you may be permanently locked out of your account.”
Jeff Pollard, VP and principal analyst at Forrester Research, said the company should provide more customer support options and “ways to authenticate Apple users so they can reset these settings.”
For now, however, users can take a handful of steps to potentially protect themselves from this happening to them.
Protect the passcode
The first step is to secure the passcode.
An Apple spokesperson told CNN that people can use Face ID or Touch ID when unlocking their phones in public to avoid revealing their passcode to anyone watching.
Users can also set a long, alphanumeric passcode that is difficult for bad actors to decipher. Device owners should also immediately change the passcode if they believe someone else has seen it.
Screen time settings
Another step one can consider is a hack that is not necessarily supported by Apple but one that is circulating online. Within the iPhone’s Screen Time settings, which allow parents to set restrictions on how children can use the device, there is an option to set a secondary password that will be required of any user before they can successfully change their Apple ID.
By enabling this, a thief will be prompted for a secondary password before changing the Apple ID password.
Back up the phone regularly
Finally, users can protect themselves by regularly backing up the iPhone — via iCloud or iTunes — to recover data in case the iPhone is stolen. At the same time, users may consider storing important photos or other sensitive files and data in another cloud service, such as Google Photos, Microsoft OneDrive, Amazon Photos or Dropbox.
This won’t prevent a bad actor from gaining access to the device, but it will limit some of the fallout if it should ever happen.
(The-CNN-Wire & 2023 Cable News Network, Inc., a Time Warner Company. All rights reserved by us.)
#protect #iPhone #thieves #lock #device
