How to Prevent iPhone Thieves From Stealing Your Apple ID-And Your Money | WSJ Tech News Briefing

[@TomNook.]

1) Use an alphanumeric password longer than at least 6 characters 2) Be aware of your surroundings when using your phone. Buy a privacy filter on your screen 3) Use biometrics 4) Setup a recovery key 5) Use Screen Time restrictions

[@kazems]

How to use the screen time restrictions? You cannot limit the settings app! Is there another way?

[@JAY-bb7yc]

That’s techlore’s video man 💀😂😂😂

[@TomNook.]

@@JAY-bb7yc rumbled

[@Faffling94]

You could also use a privary screen protector for your phone

[@irfanarachman91]

how about physical 2fa keys. like yubi? let say thieves can unlock my phone, will that key prevent they to change my icloud password?

[@stolmich]

I never use my passcode, when I'm outside in public. I always use my Touch-ID.

[@osc3.1416]

A possible solution: Touch ID or Face ID must be required to change an Apple ID passcode on any device.

[@eduardosaverin9144]

Like the way samsung does it? Yeah, I suggest just getting an android and drop the toy phone altogether.

[@andyc935]

Or use your apple ID password to change your apple ID password which is what every other company does....

[@CarlWong5]

Use face ID or fingerprint ID only. It's important to NOT use the passcode except when the iPhone forces you to, and to cover up the keypad with your other hand when you type it in, and look around you to make sure no one is watching you type it in. If someone is watching you, move to where no one is watching you before typing it in. I recommend practicing typing in your passcode while covering the keypad with your other hand at home so you will be able to do it in public.

[@nextsegment78]

The problem is Apple devices force you very often the code, even Android devices do

[@media6969]

@@nextsegment78 At least FaceID can study your face for small changes over time. Makes it more likely to scan successfully. Also, if it scans & fails & asks for your passcode, you can swipe up for it to scan again

[@andreiwatts5337]

You can minimize this by going into Settings > Screen Time > Content & Privacy Restrictions. Then Toggle Don’t Allow for Passcode Changes and Account Changes. Then change your screen time passcode to a different passcode from your iPhone. This will prevent modification to your Apple ID password on your iPhone unless someone also knows your screen time passcode.

[@blueisthecolor3463]

What happens if you click forget password again? Wont it allow to use phone passcode again

[@alleahishongaaa]

THANK GOD

[@melissascandariato3243]

@@alleahishongaaa I did this and then realized afterwards that it greys out your Apple ID so if you need to make changes to your subscriptions etc you can't. Keep this written down in the future so if you need to make changes you can remember how to turn it off! LOL

[@jaworq]

Screen Time does not help unfortunately because a thief can do this: 1. Screen Time settings > Change Screen Time passcode. 2. Click Forgot Passcode 3. Enter Apple ID email but not password…click forgot Apple ID password 4. This produces a screen asking for iPhone Passcode which thief has. Enter Passcode leads to screen to enter new Apple ID password.

[@cool-j7148]

I think the best way to prevent this is by using ur Face ID or Fingerprint to open ur iPhone, using passcodes for anything is risky and not advisable…

[@PeteS_1994]

But you still use passcode with face or Touch ID. It’s like a fail safe if the face or Touch ID fails.

[@andyc935]

Another good way is to make apple change the requirement to creating a new icloud password by using your current icloud password and not your lock screen password. Problem solved

[@R-ok3cl]

Apple should really give users the option to control the power of the passcode. There should be a warning informing about the danger to lock yourself out of you own account, just like there is for advanced data protection but users should be given the possibility to opt-in into „all account changes require Apple ID Password or Recovery Key“ as well as „use a separate passcode as a fall-back option for biometrics“.

[@abc123fhdi]

What apple should do is not allow the Apple ID to be reset with just the phone passcode, it should require the old passcode before it can be changed.

[@eduardosaverin9144]

Samsungs require fingerprints and alphanumeric passwords to change such critical information. I couldn't live with that kind of loose security on the ios

[@DannyW]

recovery key won't help since it can be changed by device password

[@GinaCarson]

@@abc123fhdi 100% unbelievable that is not how it's done. #ridiculous

[@abc123fhdi]

@@eduardosaverin9144 actually that's the same as apple, it should require old password too, not just using face or Touch ID which is basically the same as using the phone pw unless it asks for both, but still should require old account password as well.

[@tommyboy0379]

Sadly, Apple does not care about your account theft and does nothing to help you recover your Apple id. This is not as rare as Apple says. Think about having your identity stolen and your bank will never let you have your money even though you can prove who you are. Thats what happens with your Apple id being stolen.

[@andyc935]

Im not seeing this issue on my samsung. When I attempt to change my google or samsung account, it ask me to input my current login password for each account. I am not allowed to use my lock screen password to change the password. That is why they are not going after android phones not because of resale value.

[@Alex-mw4tt]

Another protection mechanism is to enable a recovery key for Apple ID, so if a thief changed your Apple ID password, you can choose “Forgot a password” option and change it again. This won’t allow to erase the stolen phone, but at least you keep you data and backups.

[@maestrovso]

Phone makers need to bring back fingerprint biometric that works. FaceID fails in low light condition, or when you wear mask, or even sunglasses. It fails too if you got a black eye from attempted robbery where you fought and successfully keeping your iPhone.

[@AlexSquared]

none of this is true. face id will work with no light. it works with a mask, and it works with sunglasses on.

[@juliuscaezar]

Is that android facial recognition you’re talking about? FaceID works perfectly fine in all the conditions you’ve mentioned. Lol

[@mnoi6788]

Shhhh!🤫 Zoe and Nicole are in the same room

[@minimalist1911]

Simple solution. It's high time Apple allowed us to login to our Apple ID using Face ID, or Touch ID depending on the model. That way, even if a thief steals ur iPhone (or iPad!!!), he can't change ur Apple ID because he needs ur Face or finger to do so!

[@Faffling94]

And don't forget privacy screen protectors for your phone

[@David-k8p8g]

How do I enable screen time protections to secure my phone

[@sandyv4623]

You talked about problem but not much on precaution.

[@thisisme3238]

Precaution = Don't do it

[@R-ok3cl]

Unfortunately, the screen time passcode can be reset with - drumroll please - your passcode. It first asks for your Apple ID and Password but if you say „forgot password“ it falls back to the device passcode. You can be 100% sure that thieves specialized in this attack know that and will exploit it.

[@Thunderz2016]

Using another Apple ID for Screen Time can significantly increase the difficulty to change the Screen Time passcode. There might be ways around it but until then this could be used to strengthen the security of the main Apple ID provided “Account changes” is disallowed.

[@edipires15]

It works if you have multiple Apple devices with different passcodes: when I simulate it on my phone it asked me the passcode of my MacBook

[@R-ok3cl]

@@edipires15 did you check if it’s always another device? Or could it be that the device is just picked at random from all of you devices?

[@edipires15]

@@R-ok3cl it always asks for my mac’s passcode. It only asks if I confirm that I don’t have another registered Apple device nearby

[@smmatuschak]

Interesting and is this only for screen time settings? Have never used screen time but if turned on you need a password to make any changes?

[@jaworq]

6:00 - this lady is unfortunately wrong... Screen Time does not help at all. Why: Thief can do this: 1. Screen Time settings > Change Screen Time passcode. 2. Click Forgot Passcode 3. Enter Apple ID email but not password…click forgot Apple ID password 4. This produces a screen asking for iPhone Passcode which thief has. Enter Passcode leads to screen to enter new Apple ID password.

[@importantname]

one device that holds access to everything you own is a criminals dream.

[@arandomcomment9477]

The only feature I want from apple is to enable face id lock on apps , this is critical especially when you need to give your phone for some one and you want to make sure they don’t see our personal information.

[@manny7886]

You can do that already through the "shortcut" routine.

[@FinnbogiRagnarRagnarsson]

Saying that this is a similar issue on Android is blatantly false. To get as far, the thiefs will need your google password at some point. Still, don't use pin code where other can see it, and if you have financial apps that use pin code, use a different one. Also, just remember those few password you use for financial applications, don't store them in an app, such as chrome or lastpass, or (sic) on your apple device. A reliable way to recover a google account is storing single use passwords somewhere safe.

[@egyoac]

Screen-time Account Change restriction and setting Screen-time Password is the best protection.

[@TomNook.]

NEVER trust the cloud. Always do offline encrypted backups.

[@zamoeyu]

You know who you *can* trust? Tom Nook

[@JAY-bb7yc]

Her phone still got stolen what would offline do at that point?

[@TomNook.]

@@JAY-bb7yc Watch the video.

[@TomNook.]

@@zamoeyu Nook Enterprises have never misled anyone. What you see is what you get.

[@korelamerikano]

On EMUI and other Chinese UI'S you can block apps and put a different passcode or password to get access, also fingerprint scanner is set by default. Make sure to protect bank, the gallery and social media apps

[@weird-guy]

Why save your bank details in your phone?

[@Alex-mw4tt]

Have you heard about Mobile banking? If you have same passcode to your mobile banking app as your phone passcode, you are done.

[@weird-guy]

i know about mobile banking, if you have you bank password as the same password as for your lockscreen ur dumb sorry, but im talking saved passwords on the phone or autofill

[@Alex-mw4tt]

@@weird-guy In corporate phones you might be enforced to change phone passcode regularly. So you might once accidentally set same passcode for the phone as you already have on your banking app. If you normally access banking app through Face ID, you won’t keep it’s passcode in mind.

[@blueisthecolor3463]

@@weird-guy Or don't give option to use autofill in bank apps. Also in Android you have option to use biometrics, which is way better than even adding bank passcode.

[@tvweilerbach59]

This happens daily in Sao Paulo, Brazil. Apple is really cynical saying there are little cases!

[@AlphaSphere]

I don't get it... there's already a video on this by Joanna Stern.

[@mmccall89]

I was left wondering how the thieves actually got them to type in the passcode. Everyone has face ID or touch ID set up. Why were the victims not using it? I realized just now that if you push the volume up then volume down and then hold the lock button, it forces the user to have to type in their passcode in order to unlock the iPhone. Is it something that Apple should change?

[@Transforming2024]

I don't get it if you have Two Factor authentication doesn't the second device have to authenticate you. just asking.

[@omar2886]

this video and nothing is just the same, thieves may do a better report about the methods they use. Fortunately there are users commenting here and providing some useful information

[@crp5591]

This problem is sadly self inflicted.. If people would enable biometric ID (touch ID, face ID) this would not be an issue. Quite frankly, the only time I ever enter my passcode on my iPhone is when I reboot it. Which I make sure happens in a place where I have situational awareness.

[@OmariRose1]

Face ID is not infallible. I have face ID enabled and often time have to enter in my passcode to log in. Especially in darken conditions. My device doesn’t have Touch ID.

[@slammerw3]

@@OmariRose1 same with me. It’s actually frustrating with the amount of times it doesn’t work. I prefer Touch ID.

[@tony.cortez]

Most of the time, iOS is asking to input passcode even if the face id is enabled, I don’t know why apple is implementing it, face id is already there, why always need to require a passcode.

[@ylihao]

@@tony.cortez Passcode is the backup unlock method when Touch ID and Face ID don't work for various reasons. In the case of Face ID, when it detects a face nearby it will try to recognize it, after 2 attempts if it doesn't recognize the face, Face ID will stop working and passcode is the only way to unlock the phone. This is similar to Touch ID, if Touch ID detects a foreign fingerprint several times it will stop working and passcode becomes the only way to unlock. So passcode is there when Face ID and Touch ID fail. If your passcode is already exposed in the first place it doesn't matter whether you have Touch or Face ID enabled.

[@crp5591]

@@OmariRose1 I have seen that before where face ID can fail. Usually due to not doing it correctly or too fast when initially setting it up. Solution is to re-add your face to the system and make sure to move your head around slowly and to hold the phone directly ahead of you and swivel your head slowly while keeping your gaze straight ahead at your phone. Don;t look down at your phone while doing it. Important to hold your phone straight out in front of you. Dark conditions don't matter as the phone uses an IR projected grid and IR camera that does not use visible light to read your face.

[@MrBelmont79]

The solution is that if someone is trying to change the password on an Apple device then the confirmation request should be sent to another Apple device. Example, If I want to change my password on my iPhone, Apple should contact me through my iPad. It would be extremely difficult for thieves to have access to both devices. I’m going to send my resume to Apple 🙄

[@ya8158]

The thieves can sign into a second device also alot of people do not have multiple Apple devices

[@ya8158]

A better option is to require the original AppleID password to be input before switching the code

[@ya8158]

And to allow the option for a separate code to Apple password manager and wallet with the same face or Touch ID. So if the thieves don’t your face they can’t get into your passwords or money with the phone password

[@MrBelmont79]

@@ya8158 Apple can set a special notification program for these circumstances like “where’s my IPhone “

[@smmatuschak]

@@ya8158 just make sure that it’s not stored in your keychain..😐

[@borisattva]

RE the stolen iPhones equating a lost wallet/identity: Can AirTags be set up to be a required proximity for unlocking a phone? Like, you have the tag somewhere on your person. If the open screen phone suddenly loses AirTag it locks the screen. Or, If the phone is woken up and attempted to be gotten into, it checks the surrounding for the dedicated AirTag. If its not found, the phone explains that on the screen and only allows support through an Apple store, or a phone call that would require the owners other personal information before any changes can take place. It wouldn't need to be on all the time. only when out and about and somewhere at risk of being mugged. at home it could optionally use similar proximity (GEO or wifi) to not be required.

[@Sowonji]

you're basically looking for a physical security key. which apple just implemented for icloud login but i wish apple it would expand it to icloud keychain and your mobile wallet

[@borisattva]

@@Sowonji well, the "key" would still be the pin. the AirTag alone would not unlock the phone, but would be something that is not easily snatched from the person unlike the phone, and lack of it being in the proximity to the phone during the unlocking would render the key/pin possibly compromised. the key/pin would then be rejected until the proximity to the assigned AirTag is restored, or account is verified through additional interaction with Apple Customer care by the means of additional, personal questions.

[@Sowonji]

@@borisattva yup that’s what a physical security key does too like yubikey with nfc

[@xrusous]

Think twice before you put all your eggs in the Apple basket.

[@rajkumar-jd8kk]

make a video on how to allow too..

[@auro1986]

how? wait for apple to advertise a new iphone model here in wsj and buy that

[@erc8311]

This isn’t a duplicate upload but like…why the two so similar videos days between

[@eduardosaverin9144]

Shocking! The security on an iPhone is trash? I would have never expected that from a toy phone...Upgrade to Samsung where security is taken seriously.

[@dr.debbiewilliams]

I said someone stole my Iphone as well as other things.

[@mahaelhag6892]

A lot of people around the world 🌍🌎🌎🌍🌎 have LOST PHOTOS from the years 2022 2021 2020 2019 2018 2017 2016 2015 2014 2013 2012 2011 and beyond PERMENANTLY GONE FOR GOOD

[@pappucharlie]

Those who gonna do it will do it anyways no matter what security you have . That’s the game .

[@RoqueSantosJunior]

Joanna Stern is better at this.

[@ronchster1]

Bull s-t. iPhone always locked by Face ID.

[@itzpogboy]

me out here using a samsung phone

[@AlgoNudger]

I think, none can save you from premium exploit (full chain, zero-click, with persistence' iOS zero-days). 😂

[@eduardosaverin9144]

Apple's security is trash these days.

[@AlgoNudger]

@@eduardosaverin9144 SO TERRIBLE! 😂

[@DomGamesERLC]

Nice video!

[@NomadicJulien]

never use your passcode in public places

[@evidenceplz]

This video is a complete waste of time. None of the safety recommendations mentioned by Nicole will prevent malicious actors from stealing your Apple ID. The iphone thieves are highly likely laughing at you WSJ

[@elizabethhurtado2829]

They are very good at pretending to be other people too, they change their hair, buy similar clothes etc.

[@Mr.Deleonn]

Samsung 😈

[@jbjell]

Best stay broke

[@dinoscheidt]

😂 commenters said on the first video how to prevent this after WSJ accused Apple, now “WSJ did some research” - taking the tech dyslexic for a ride. As the commenters said, disable account changes in screen time. But you are potentially screwed when you forget your Apple ID password (!)

[@joe.oneill]

The best way: Go Android.

[@gizza150]

😅😅🤣Who said that ?

[@JeremyDeBose]

@@gizza150 less likely to be stolen?

[@TheGrandChelem]

Did you listen to the video ? Android works the same way. People target iPhone users because iPhones have higher resale value

[@TomNook.]

@@TheGrandChelem So, go Android

[@blueisthecolor3463]

@@TheGrandChelem No it doesn't. Android can easily be formatted and sold but user won't lose personal information. You can't reset google account with phone passcode nor use bank apps. Police just says iPhone has more resale value in the video.

[@symonsmith3497]

The answer is Android.

[@AlexSquared]

says the troll who cant afford an iphone. lmaooo

[@mynock250]

Shes a dope, there is 2 factor security if turned on, and PHYSICAL security keys (you need 2) that prevent this. Shes just naive.

[@vince7003]

1st!! Yay!!

[@jland904]

Basically leave Apple alone they make more money when their product is stolen. I’ll get me an android soon lol

[@johntomko2946]

This is much ado about nothing. It is the same as watching someone punch in their debit pin at the cash register and then mugging them outside. Being careless has consequences.

[@MiamiMillionaire]

the solution is very simple, do as I did and use a Nokia from the nineties

[@superfluous5162]

That why I have tracker in my phone , and turnoff only if someone destroy it .

[@Jari_Opsomer]

that nokia has no pascode.. full access to your sim..

[@MiamiMillionaire]

@@Jari_Opsomer The SIM card is protected with a four-digit PIN code and I don't have any data on it + it is also a Priepert card

[@hussienalsafi1149]

🥲🥲🥲🥲🥲🥲🥲😎😎😎

[@sandyv4623]

You talked about problem but not much on precaution.

[@thisisme3238]

Precaution = Don't