How to Fix the FATAL FLAW in iPhone's New Security Feature

The new feature is awesome, but I see one big potential flaw 🤔
⇒ Become a channel member for special emojis, early videos, and more! Check it out here: kzbin.infojoin
▼ Time Stamps: ▼
0:00 - Intro
0:31 - Potential Flaw Summary
1:11 - My Solution
1:53 - You SHOULD Still Enable Stolen Device Protection
3:39 - How the Thefts Work
4:42 - Benefits Of Stolen Device Protection
5:03 - A Big Potential Flaw
7:14 - The Result
8:24 - What If You Can't Turn It Off Yourself?
8:47 - More Stuff You Should Do
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
• My Gear & Equipment ⇨ kit.co/ThioJoe
• Merch ⇨ teespring.com/stores/thiojoe
• My Desktop Wallpapers ⇨ thiojoe.art/
⇨ / thiojoe
⇨ / thiojoe
⇨ / thiojoetv
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬

[@ThioJoe]

• UPDATE: Apparently the iOS 17.4 beta has added an option to always require a security delay even at familiar locations, which is a great step. I still really want the ability to specifically choose the familiar locations, to prevent the passcode from being used at all for important tasks. • ANOTHER TIP: I didn't mention this but several have mentioned that you can actually use the "screen time" feature to add a second separate required passcode for certain functions like account changes. It's a great option but might make it annoying to access other settings like info in the icloud menu.

[@MsMaciek]

This video looks like AI'd your face

[@kensteele3363]

Is there a way to designate just one location HOME as a familiar location and that's it! Only HOME and nowhere else. Seems to me that would be a popular option.

[@urrow]

@@kensteele3363 No. There isn’t.

[@BadWulfy974]

Another tip: if you can't use FaceID for whatever reason (and if you have iCloud backup enabled! really important!) you can restore your iPhone by putting it into download mode, then restoring and reset it using a Windows/Mac. In most case you won't loose any data.

[@Stealthmuiz]

Guess what: You can still change the screen time password with just your phone password.

[@luckees]

if apple would just let us manually enter these locations...

[@Sertsch]

That's exactly what i hate about Apple Products: there are so many annoying little limitations in their whole lineup of products an services.

[@pxnchx93]

Then a thief would just enter his home as familiar location…

[@WhittyPics]

Or only apply it to work or home

[@breadmachine_official]

Or maybe select from a map which locations do you want to keep

[@killertruth186]

@@pxnchx93 Then again, it’s a double edge sword.

[@tdrg_]

Update: iOS 17.4 beta includes the option to Always require a security delay instead of just unfamiliar locations, effectively working around this flaw.

[@SeanTube2099]

It’s not a flaw, it’s a designed convenience for regular people.

[@angelortiz5898]

It is a flaw if the design fails to consider a very important side of the picture, or if the measures taken for this are insufficient@@SeanTube2099

[@IceBlueLugia]

It’s because normal people will find it annoying that the restrictions exist at all times. So Apple does you a favor and by default makes it so you don’t have to worry about it getting in the way!

[@ndrs.e]

Still a flaw.@@SeanTube2099

[@ndrs.e]

And effectively rendering it useless.@@IceBlueLugia

[@kawixh]

love how he went straight to the point

[@BillAnt]

Or just don't use a phone for everything like financial and other sensitive apps. instead, do it on a home laptop/computer, problem solved. ;D

[@HMijailAntonQuiles]

@@BillAnt I'd bet it's safer to use a relatively locked-down system, like a phone, instead of a computer where you have many more chances to install anything, good and bad, making the attack surface much wider.

[@BillAnt]

​@@HMijailAntonQuiles - Don't know about that, but what I do know is that in the past 20 years I've been using my computer exclusively for all my financial transactions, I haven't been hacked even once. I don't install every random app I find on the web, and don't click on every "You won a million dollars!" link either. And yes for dummies who do all that I don't recommend neither a phone or computer. lol I just feel more comfortable and easier to type on my real keyboard on a large screen than squinting at my phone screen. But hey, to each their own.

[@BillAnt]

​@@HMijailAntonQuiles - What I do know is that in the past 20 years I've been using my computer exclusively for all my financial transactions, I haven't been hacked even once. I think that's a pretty darn good track record of safety.

[@Bluj4y44]

love how he actually showed us how to do it (he didn’t)

[@lightnorthwind]

An additional layer of protection in conjunction to using Stolen Device Protection is to set a 4 digit Screentime passcode, ENABLE Content Restrictions and then DISABLE the following two items: 1) "Allow Account Changes" and 2) "Allow Passcode Changes". This is the method I used before SDP became an option in iOS 17.3, and I intend to carry on using this as a "belt and braces" approach. Can't be too careful!

[@Phoenix-gz2ht]

This method also works across Macs, iPads, and other iPhones attached to your iCloud account. As of 1/28/2024 SDP only can be enabled on iPhones.

[@nasseralsharif]

That’s Advanced Protection (I call it)😂👍 The iPhone will be useless for a thief! I don’t really understand why thieves keep stealing iPhones in 2024 when they’re aware of Find My and all of the security protection iPhone has? I see it as a bad investment for the thief himself…

[@AdidasLove34]

Indeed. I'm surprised more don't do this.

[@Slimothy]

*FYI I'm running iOS 17.4 Dev Beta 1 and there is a new feature to require security delay "Away from Familiar Locations" OR "Always", so no need to turn off Significant Locations, if that's what you're worried about.*

[@atpray]

If someone enabled it in 17.3 and updated to 17.4 is the Always option selected by default?

[@Slimothy]

@@atpray No

[@AlanTheBeast100]

(Pro tip: "all bold" means nobody reads what you write).

[@Marsychu]

It doesnt require faceID to set it back to familiar locations. lol

[@Boostiverse]

Yeah it should let you select locations

[@macbitz]

Great video, thanks! Apple did make this new feature a little over-complicated. It would have been better had they allowed you to specify your own significant location(s), that way you could potentially set just a single significant location (e.g. your home) where the additional protection is overridden.

[@All-sk9qz]

You can add an additional layer of security by turning on screen time and disabling account changes so it’ll be harder for thief’s to sign out of iCloud As you can’t go to settings-> screen time -> then content restrictions at the bottom turn off account changes

[@DustinDawind]

I also have implemented two additional security steps. 1. I set a pin for screen time and disabled passcode changes and account changes. This way even if they know your passcode they still can't change your device passcode or your Apple ID password. 2. I set up an automation in the shortcuts app that automatically locks the phone any time you open critical apps. The automation only applies if the phone is not connected to my home wifi. So for instance, you are sitting at the bar texting your SO and someone walks up grabs the phone out of your hand and runs while it's still logged in. They open the settings app, the phone automatically locks. It's really not all that much extra effort to just use your touch id or face id to quickly log back in. It's basically no different than how some banking apps request a touch id to open the app. I also applied it to my email app as well, because if they get access to your email they can start doing password resets on accounts you have tied to that email. And I have other apps set up that way as well.

[@kai1os]

This is a great idea. Thank you

[@SendFoodz]

very good info, power and home at same time, cool!

[@orangecat2287]

Another useful video!! just enabled the feature! Thanks again Thio!!

[@Slurkz]

Thanks Thio! 💜 Many people commented that there's a fix for this flaw in the iOS 17.4 beta, but the other topics in this video might be just as important.

[@costykyo]

when talking about this future, nobody actualy covered this flaw, thanks, great video, helpfull as always. ur the best

[@michaelhughes8649]

Great video - thanks for the update, really useful

[@Doveflyr]

totally awsome and professional. Thank you for this valueable and useful information we should all take a half hour and do the things you suggested in our iphones. Keep up the great work.

[@aamirjanjua3380]

Many thanks for sharing very informative security updates god bless take care

[@MichaTerajewicz]

Nice! I have just found this feature in my new iPhone and I have noticed this flaw too. I have had the same conclusion as you. High five 🙏

[@scottp131]

i loved your og stuff when you just tried to piss people off, but your new stuff is kickass too. thanks for the content, you kickass!

[@EbolaGW]

Did it right away. Thanks for the tip

[@nikkic36]

Thx for the advice which I’ve now done

[@teemuntubetus]

You should activate Screen Time to YOURSELF -> and disable passcode and account changes (under Content & Privacy Restrictions). You ofc set a different numerical code here than your ”regular” passcode. After this, the thief now would have to know your passcode AND the different Screen Time code to do anything account or passcode related.. BUT…. This might not be 100% bulletproof, because you CAN reset the Screen Time code via AppleID, but it prevents the process to be ”familiar” and fast..

[@markster136]

The screen time passcode can be reset with your regular passcode sadly.

[@militaryav8r]

@@markster136how so?

[@nickelsey9864]

@@markster136 incorrect

[@Isabel369]

This is the best video on KZbin right now thanks for sharing this information thio Joe 👍👍👍👍👍

[@Zantsak]

Great video. Thank you.

[@JohnSmith-xq1pz]

I'm surprised the comment section is so civil lol

[@iamhumi]

Don't jinx it lol, it's only been half an hour

[@ImSquiggs]

These videos have a great community in my experience

[@sinforgreatness]

As someone who lost his 13 mini this way. I'm setting up my new 15 with this video, I've had it bookmarked since you dropped it. LIFE SAVER 🙏

[@RogerArm231]

Thanks!

[@JediKnife]

Great video thank you! You gained a subscribe for sure

[@patcostello3882]

Much appreciated 🤩

[@zoeyundergroundcanada]

Thank you

[@thatlooksdou]

Nice video!

[@daveaultman7688]

Good video. The Screen Time pin lock workaround seems more secure with less hassle (not having to wait an hour). The simplest solution that Apple could have implemented would be allowing you to choose a different PIN/Passcode for critical system services or apps.

[@Ironyum99]

YES! MORE THIOJOE! 🎉🎉 lets gooo! i love thiojoe ❤

[@aj_aka_alan]

How does the setting for unlocking with Apple Watch play into this? Should I disable that feature as well?

[@brianbrino4310]

Thank you ThioJoe, excellent hint and advice!

[@austinmcnair612]

1) What if your phone faceID breaks? Can it still be recovered/transferred to a new phone? 2) On airplane mode on lock screen, what about the bluetooth lost beacon for powered off phones?

[@omniiomega]

Another good tip is to use a privacy screen protector to prevent prying eyes on the side

[@alexandramadrigal1652]

The places I visit the most are my university and work which is a hospital are probably the places my phone is most likely to get stolen so this is very helpful

[@DavidM2002]

More than anything, the video confirms why I don't use my Apple account for anything more than the most basic of functions. Thanks anyway Thio; a really informative video as always.

[@craiggmelville]

Can you elaborate?

[@CrisCheese_]

​@@Albdeanur phone will still be gone :/

[@jeffreyrh]

Turn on screen time, set a different passcode for screen time, and under Content & Privacy Restrictions, set Passcode Changes and Account Changes to 'Don't Allow'. This way, even if they somehow got your regular screen passcode, they will not be able to make any passcode or account changes without knowing the separate screen time passcode that you set.

[@Starwarsgames66]

iOS 17.4 Beta fixes this issue. There is another menu in 17.4 to require the delay always rather than only when not at a familiar location.

[@marktherobloxguy]

Yay! ThioJoe's upload schedule is fixed!

[@watainiac627]

I just got a 15 Pro a few days ago and set up a 4 digit PIN because I wanted some security, but to still be able to unlock it quickly, mostly so I can easily change the music while driving. But it's nice to know that if you set a alphanumeric password you don't have to enter it all the time, so this problem wouldn't be as obnoxious as I assumed it would be under the same circumstances.

[@paulstelian97]

Yeah the passcode is only requested when your face is not recognised enough times, or once in 72 hours or so.

[@user-il5nw5qj9i]

You can also add unlocking to face ID by recognizing a code word or phrase, which the user could record in advance using sound recording. It would be nice if they added this

[@_SJ]

This video has proper subtitles ❤

[@IesKorpershoek]

Why only on the Iphone and not IPAD??

[@BobG-eh5fc]

Thanks for a great tip on IOS 17.3 security. Hopefully 17.3.1 or 17.4 will come out soon with better options.

[@tom.shanghai]

5:42 I've no phone but ipad. when i scroll around the map i can see other locations. my university has two campuses. both are marked at significant locations. haven't been there for a year. my home apparently is no significant location haha.

[@Freejaffa86]

Great video, love how the stock image of the thief looks like Linus 😂😂

[@jakeyounglol]

i just updated to iOS 17.4 beta and it adds an option to always require the security delay

[@chromebox]

I would have thought "significant locations" are places where you have unlocked your device (otherwise a thief could hang out in an area with your phone till it got added to the list)

[@KishkaBluds]

i love everything this dude is doing

[@bobbyjohnson116]

If you disable significant location does it not use the set home and work addresses in Apple Maps?

[@magichands6319]

With an IPhone SE2 I am stuck after enabling this new feature. I cannot access my passwords or make certain changes any longer. I almost always use my numerical codes to enter in as my phone case has a film over the home button that does not allow it to recognize my fingerprint. While I have access to most of the phone, I am stuck in an endless loop of a Touch ID requirement and after removing the phone case to access the home button, it does not recognize my fingerprint! Unfortunately any of the options to fix this requires a Touch ID to verify. This phone does not have Face ID. So far unable to find a fix. Not sure yet if I have a faulty home button fingerprint recognition, or if it is the stolen device protection that is negating the Touch ID. Still looking for a solution. Great video by the way! 😊

[@jwillisbarrie]

Thanks for adding actual captions for the Deaf

[@SirHackaL0t.]

Do you lock the account settings under Screen Time, Content and Privacy settings, Account changes? It stops access to your Apple ID section in settings.

[@arkabhowmik7832]

Thanks for all the information! I just have one question - is it necessary to disable Siri in the “Allow access when locked” section That means the “Hey Siri” phrase won’t work while it’s locked, right?

[@GarbanzoBeansFan]

yes. siri wont work when locked

[@cttcjim5353]

User: "I had a major facial injury." Apple device: "New face who dis?"

[@robnnorl]

Thanks for the video and changed my settings. What I found interesting is, on lock screen it asks for my face, which is great. So I tried to see what would happen if I didn't point the camera at my face and the password screen comes up. So now the thief with your passcode can still get into your phone.

[@tomeauburn]

Does the theft production work on 13promax? I do not see the menu option that show how to get there. I have 17.3 and rebooted

[@youknow5569]

EVERY TIME I backup my phone, plug it in to charge via USB or even when downloading photos I MUST type in my passcode. It is needed a lot more than you suggest.

[@BonelessChickenStrips909]

useful

[@abhaymistry]

There's a pretty easy work around to that. Sensitive settings like find my phone, face unlock and apple account settings should simply have different pin and not lock screen code. I never understood why they didn't apply that tbh.

[@ARtorNot8]

I think that’s just too complicated for many users, having to remember multiple codes would become inconvenient and bothersome. Especially for elderly iPhone users. They can barely remember their one passcode or password lol

[@miketech79]

I thought you would need Face ID to turn on the Significant Locations anyway. Perhaps that's something you need to try, when it's off and the Stolen Device Protection is on, can you even turn on the Significant Locations option with a passcode only.

[@nybe]

is there anyway to use this without requiring face id?

[@mohammedelabbassi735]

Thanks bro it was a great talk ! Why don’t disable password change in screen time so when the thief wants to change the password he will be required to enter the screen time password 😮😊

[@Sir_Pilgrim]

Screen time is a good way to ensure additional protection, you’ll rearly ever need to enter your screen time password, and a thief will need it to change your account settings and your passwords … it’s quite easy to set up too… screen time - set screen time passcode - content and privacy restrictions - account changes and passcode changes - select don’t allow … I kept this on even after enabling stolen device protection cause I’ll be keeping significant locations on… Keep in my mind, one time you’ll need to use your screen time passcode is when you yourself need make changes your account or passwords - eg. Face ID is hidden from menu so you’ll need to disable screen time to access it (well just allow changes - then change back to don’t allow after)

[@redeye007]

I wanna turn this feature but I have a question. That one hour delay. Would the owners of the iPhone also have to wait for that 1hr to change to make changes or is there a way the owner can by pass the one hour delay. I hate to turn on the feature then have to wait an hour when I wanted to make changes.

[@markster136]

It used to be easier to lock down apple account with a screen time passcode. However with recent changes they have made it harder to do that. It can still be done with screen time passcode but you have to remove your passcode which makes no sense.

[@MorbidGod391]

5:50 wow some how a work place for my Wife was a significant place… and I don’t really go there that often anymore. I cleared and turned it off tho

[@marqwylliiems3085]

Thanks for adding Polish

[@csr2120]

9:45 With the Control Center turned off in 'Allow Access When Locked', I can still turn on Airplane Mode from the lock screen. Running iOS 17.3.

[@reefhound9902]

Are you sure it isn't reading your Face Id? Try opening Control Center while covering your face or looking away.

[@csr2120]

@@reefhound9902 Yeah, my finger wasn't entirely covering the camera. 😊

[@iwannapatthemanul]

Wow new audio track translating feature

[@pejorativesaint6587]

Messing around with the device protection feature, I had to wait an hour even at home to make changes. Strange that my home wasn't considered a "familiar location"? So, hoping they are pretty strict with familiar locations

[@booshine187]

Thank u luv from brooknam

[@stevebrenner209]

Should this be available on a 12 pro max?......Don't see it as an option in 17.3

[@mynock250]

One big correction find my is NOT disabled even by being powered off anymore, the recent iphones completely turned off are still able to be located through Find my, they act as an airtag all the time. Putting it into airplane mode or powering it off does not affect this anymore.

[@mrdiamond64]

Even if Apple let you customize Familiar Locations whats stopping someone from creating a backup of your device, dumping all the locations, and going to that location later on?

[@IulianMihaiu]

Screen Time - analyse in detail this setting, there are clips on youtube.

[@Damariobros]

Question, in a familiar location, does it let you use the passcode as fallback for ALL the features, or just for disabling Stolen Device Protection? If it's the latter, you could just restrict access to the Passcode & FaceID settings using Content Restrictions in Screen Time, and set a separate Screen Time passcode to prevent changes. Also you can restrict Account Changes to prevent access to iCloud settings.

[@paulstelian97]

In familiar locations you still get the security delay, but the passcode is usable for everything. Even in unfamiliar locations, unlocking the phone itself is available with the passcode. Only the more serious stuff like fiddling with the Apple ID, with Find My, or Apple Pay, those become protected.

[@Damariobros]

@@paulstelian97 Well that sucks

[@Soundwave857]

as someone with touch id a long code unfortunatly isnt an option since touchID barely works for me

[@alexbishop5870]

Even with Stolen Device Protection enabled and your extra suggestions followed, if my phone is stolen how do I access my Apple ID account without Apple sending a security code to the thieves instead of me? Obviously with a second device logged in it’s ok but if I need to use a friend’s phone? Apple devices are very costly, not everyone has 2?

[@tubular618]

Seems odd that Stolen Device Protection (SDP) requires Face ID to access certain features, but iOS still forces me to enter my passcode on a regular basis to use Face ID. Makes no sense if Face ID is the more secure authentication. I already have Significant Locations disabled to save battery.

[@1drhnsd1]

Seems like a better solution would be to require a different password and Face/Touch ID to get into the Settings app.

[@oyovwidestiny]

Hello, I updated my iPhone to the latest version after which I turned on Stolen device protection. And now my Face ID can’t detect my face anymore! I have tried turning SDP off buh it won’t turn off since my Face ID can’t detect my face. Now I don’t know what to do anymore.

[@fiat1312]

Would it make a difference if you had one p/w to unlock the phone plus your heavy duty pass code to unlock important things? Thief would need two pass codes but you would be providing only one.

[@mgomez5606]

Is this another feature that will prevent someone from using phone if it's not removed when you buy the phone from someone?

[@Castle_Bravo.]

I appreciate videos that show iOS devices security flaws. I like to think Apple employees watch them too cus every updates to my iphones security system, make me feel 10x more at ease when I misplace my iphone. Thanks

[@DenverHarris]

I have 17.3 and that item Face ID and passcode between Siri and emergency SOS is not there! Why don’t I have that option?

[@user-wz7sx2ii3w]

How to choose original audio track in mobile web version?

[@Aldebaran65]

Create automation at shortcut to run when airplane mode is turned on, immediately turn it off.

[@zaph1rax]

You can disable account and code changes from the Screen Time menu and set up limitations with a different pin code. It's meant to allow you to let your children play on your phone and restrict them from changing vital stuff. It also works if some thieves have tricked you into unlocking your phone. With this, any thief can't change your code or do any account setting stuff without the extra pin code.

[@yaseen4375]

I’m confused. In the video you say that turning off Find My asks for your passcode. In my case which I’ve tested, it requires my Apple ID password.

[@palles1972]

Hey, are use screen time and I have clocked off passcode and Face ID, and make another pin code to screen time

[@muki_x]

My Face ID module is broken, is it even worth upgrading to iOS 17.3 for this feature?

[@tdrg_]

No. You risk getting yourself locked out. You can update, just don’t enable the feature.

[@YT_Gopnik_Mario]

for me it showed place i have been only few times there as signifficant Location (Travnik, Bosnia and Hercegovina) and location i was at for only 3 days (Budva, Montenegro) amd location i was at only ones (Dubrovnik, Croatia) and apareantly familliar location is one village in my Hometown (Jelače, Bosnia and Hercegovina)

[@marcobagnoli5406]

Where is the link?

[@bobbyjohnson116]

Turning off significant locations also saves a bit of battery!

[@Jamesits]

I've never had reliable Touch ID unlocks on any of my iPhone, iPad and MacBooks. Every time I set them up, it stopped recognizing my finger after a few days. Face ID still works well but the experiences of using Touch ID for some 10 years makes me very worried of the situation where Apple just seems to randomly put patches on their device security design without thinking about their usability and security. Why we have to choose either the password or the biometrics? Why don't do a proper 2FA? (e.g. require any 2 of a hardware security key, biometrics and a password) I ended up supervising all my iOS devices and register them to MDM so that I get managed lost mode. It comes with their own caveats though.

[@aj_aka_alan]

I've turned off the same items you have turned off for access when locked, and airplane mode is still there as well as bluetooth.