Your iPhone has a MAJOR security problem (5 tips to keep you safe)

The iPhone has a problem, and it's one that could impact absolutely any of the over 1 billion iPhone owners out there including you, it has the potential to be catastrophic if you're targeted, and Apple seem to be either reluctant, or unable to do much to fix it. In this video, I'm going to explain the problem to you, and give you 5 practical tips that you must be using to keep yourself safe.
📖 Want the PDF for this video? Become a Channel Member!
Join via Buy Me a Coffee - geni.us/jAGpK
Join via Patreon - geni.us/a0o5
Join via KZbin - geni.us/GCSpFOJ
📧 Want a FREE weekly dose of Tech News, Hints and Tips? Sign up for my newsletter!
eepurl.com/h7MWfv
☕️ Getting value from these videos? Want to support the channel? Buy me a coffee! www.buymeacoffee.com/properho...
🖇 Get the items I use in my office - kit.co/ProperHonestTech/my-de...
📹 Get my Video Production gear - kit.co/ProperHonestTech/my-vi...
As an Amazon Associate I earn from qualifying purchases.
🔗 WSJ iPhone Passcode video • Apple’s iPhone Passcod...
Follow me on my socials!
Instagram - / properhonesttech
Twitter - / properhonesttec
Chapters;
0:00 - Intro
0:23 - The Problem
8:16 - What should you do?
12:33 - End

[@ProperHonestTech]

📧 Want a FREE weekly dose of Tech News, Hints and Tips? Sign up for my newsletter! eepurl.com/h7MWfv

[@Damariobros]

My iCloud account still has the old version of 2-Step Verification, the one with the old secret questions system. Whenever I attempt to go into any settings in my iCloud account, it asks for 2 random answers of the 3 tied to my account, in addition to entering the passcode for the account change itself. Apple needs to bring back this extra verification in some form, an extra verification that pops up when attempting to access the iCloud account settings sub-menus.

[@reardelt]

There's an easy fix. Just use Face ID in public. Why use passcode when there are prying eyes everywhere? What's the point of Face ID if you don't want to use it?

[@Damariobros]

@@reardelt Some people aren't tech savvy enough to use it, others might not want to give their face to Apple. Also there are a number of things that can trigger Face ID to be disabled and the device requires the passcode to unlock, and there are some apps that can ask for a passcode entry but not Face ID. Every person's circumstance is different, and there are a number of people who might, at one point or another, need to enter their passcode in public. Those are who these attackers target. Apple needs to bring back asking for verification to access sensitive Apple ID settings from Apple devices.

[@reardelt]

@@Damariobros well. Face Id cannot be disabled unless you specifically disable it. There are no apps that reject using Face iD

[@dkrconch]

Nine minutes into the video he says to go to settings, Face ID and passcode, change e passcode. My iPhone doesn’t have that. Why?

[@williambunting803]

The other thing that is important is to take a screen shot of the “about” page, specifically the IMEI number(s) and keep that on some one else’s phone. This is the number that the cell system uses to track where your phone. You send this number to the Police and they can see where your phone is and block it out of the cell system. This used to be a thing we all should do but it is forgotten. I am going to do what the previous commenter said too.

[@jbcentral1545]

The IMEI number should be printed on a sticker on the box the phone shipped with. At least that’s how it used to be, I’m not sure if phones still have their EMEIs printed on the box

[@rachelio33]

Scary indeed! Thank you so much for this video and your suggestions. Especially not being aware of the problem is the biggest danger.

[@Ricky-ln6rt]

Great video, very well put together and explained, thanks!

[@GomathinayagamN]

Thanks for the amazing content. Finding it very helpful!!

[@josephfredbill]

Also, I have complained to Apple for ages that it makes no sense for a two factor code to be sent in a message to the device you request it on. It *should* be sent to your other devices excluding the one its requested on. Implementation of this would be easy - either a special category of message or, since they read the messages (are they encrypted?) so the system can know its a 2fa code they can pre-empt and disable delivery for such a message to the requesting device.

[@josephfredbill]

@@rorybraxton it isnt safe because the device could be stolen and broken into. Its tough for people who have only one apple device admittedly but many people have several. And given that Apple knows what devices you have it would be easy to work around for those people that *do* have multiple apple devices. In fact it would encourage people to buy additional devices, which you might not like bu5 apple surely would. You can blame people for not being deterministic automatons of course but that wont improve anything or change anybody.

[@astra1360]

@@josephfredbill that’s an insanely dumb idea. You would never be able to do anything on the go if you don’t have your iPad or MacBook with you. 2fa is there to prevent people from remotely hacking your account. Leaking your passwords and having your phone snatched is a very very rare occurrence and not fully preventable

[@josephfredbill]

@@rorybraxton so those who do have them stolen are unimportant because most people who called you hadnt had them stolen ? I dont mean to be rude but what you have written does no credit to Apple for who they choose to employ. Is that your logic - that what you dont see doesnt exist ? Dont answer that - there’s no point in this interchange. You just want to be right - well logic and analysis does not support you.

[@josephfredbill]

@@rorybraxton so why are you arguing that being able to have 2FA codes sent not to the device on which they were requested where a user has more than one device on the grounds that “having your phone snatched is a very very rare occurrence” - your words. 1. Its not rare, 2. Its not an unimportant case. Sure users forget passwords, so what - that doesnt make 1 and 2 in my statement here false. Ok I just noticed there are two people here - I quoted you here from @astra1360’s response.

[@josephfredbill]

@@rorybraxton my apologies for reading @astra1360’s response as if it were yours. I agree its a tough problem. I still think that Apple could have a user-election (ie preference) to not have 2FA codes sent to the device on which it is requested where a user wants that. To @astra1360 - your response I percieve as both rude AND ignorant. If you want to choose to take that risk then do so but there is no need to impose it on everyone.

[@mennaallahmohsen]

I really feel safe when I listen to you and when there is a problem and I try to solve it calmly. You really help me with these videos. Thank you.

[@CB-yh3ov]

The problem is not the passcode, but that you can reset your apple-ID with it rather than to type in your apple-ID password.

[@wisdomyaw03]

That's because in the event that you forget you AppleID password you can still be able to access it

[@asadullahilyas]

@@wisdomyaw03 in case you forgot, Apple should send you a link to change your password to your email. Like the rest of the sane world is doing.

[@asadullahilyas]

@@wisdomyaw03 so instead of an SMS, it should be an email.

[@wisdomyaw03]

@@asadullahilyas There is the option for email as well but it's still coming to the same phone, right? So the point still stands

[@Patricia-kk8tr]

This is why Apple has brought in security keys for changing the Apple ID - to give a secure alternative for iPhone apps. But until it’s better supported by banks, it is rather expensive just for the Apple ID. Also it’s designed for adding to your keyring. Why would you need or encourage someone to carry it on their person when it is best kept safe away from the iPhone?

[@tomaetomahtoe3819]

Thank you for this informative video. I don’t imagine such a situation happening to me but I can never truly predict the future. I do alway use face id because of how convenient it is but it harms no one to take extra precautions to prevent the worst from happening.

[@blainecooper6564]

Thanks for making valuable educational content! Really appreciate you, man.

[@ravi06197]

Apple should bring back Touch ID as a secondary unlock system which can be on the side button, similar to the 10th gen iPad top button. Maybe starting with iPhone 15. Passcode should be used only as a last resort and that too when you are not in a crowd.

[@ProperHonestTech]

Yeah I've thought this for a while now. I know that the technology isn't there yet for under-display Face or Touch ID, but why not built into the power button?

[@levintage]

It wouldn't work with a case though

[@ProperHonestTech]

Good point, although depends on the case (I have a Pitaka case that leaves the side buttons exposed).

[@ravi06197]

@@levintage I don't think it is an insurmountable problem. Apple - the master of design - would have to do some testing and then provide the specs to the case manufacturers. And perhaps have the side button project 1 mm or so further out.

[@wisdomyaw03]

Adding TouchID to the iPhone doesn't prevent this situation by any means

[@marlonsouza9224]

Thanks for the great and important video. I changed everything here, based in your recommendations. I really appreciated it!

[@turist733]

Thank you very much. You’re really something. Your videos make difference. This is so very important and a lot of people need to listen/hear what you say. Please continue your good work. ❤️

[@srbs73]

Really good. A real eye opener and will be taking action this weekend.

[@wiriadinata]

thanks for the sharing. just realize this weak point at my device

[@tesla-spectre]

Fully support your suggestions. My rule of thumb is not to use passcode ever when in a public place. Even udring Covid I would rather wait for login until out of a group of strangers then while in it. What I do not understand is: to access passwords on Safari on the computer you need the admin password but you do not on the phone. Why not use the admin password also on the phone

[@milanchristi7939]

Sound advice! Thank you!

[@flyshacker]

Outstanding video! Got me to change my ways! Many thanks!

[@mohammedlayeekamara3469]

Tnx for this education!😊

[@kr1221E]

Thank you for this video 🙂

[@alexandraross4787]

Good data and advice, thanks!

[@Mary-ow2nq]

I found this video extremely helpful and i will be using the Face ID from now on going forward. Thank you

[@richardrust9532]

Thank you for the info!

[@prabhakarrao4922]

Many thanks. Great advice.

[@Rogar0]

yep; totally agree! I have very early on chosen an alphanumeric code with more than 12 digits & ciphers with special characters! It is sometimes a ‘bummer’ when my biometric doesn’t work, but I feel it’s worth it! I also use a password manager rather than putting all my ‘eggs’ in keychain, but nevertheless use it now and again! I also use Proton mail and Signal on my phone! I try to maintain a step before to ensure to make as difficult as possible to not get ‘Virtually’ mugged! But I am well aware these are just improved steps to keep up to speed! Thanks for your Videos, I have picked up many tips from your channel! 👍😎

[@Web3Prep]

7:18- you hit the nail on the head there. So true

[@Arsalan_2210]

great video tom! thank you for making such great content for us. I wanted to share an idea though... we do need an app lock feature on iPhones and there should be a feature that asks for a passcode whenever you try to turn off your iPhone. That way, if your phone is stolen and if you have an E-SIM, it would be nearly impossible for the thief to turn off your iPhone. And because of this you can easily trace the location of your iPhone. :).

[@mayorplayz]

Your iPhone is still traceable even if its turned off btw, they can only turn that off by tapping the "Allow this iPhone to be findable when turned off" after getting to the shut down screen and entering your passcode

[@delta-a17]

Hard reset on devices is extremely important since occasionally these devices lock up or freeze. Without the ability to hard reset the device it's essentially bricked. Also any smart thief would drop the phone in a faraday bag making it invisible until the battery runs out or simply take out the battery.

[@michaels7499]

I set my iCloud sign in on a YubiKey. I also go into Screen Time and set not allow to account changes and a few other things and set up a different pin for screen time. That locks out my profile on device unless they know that pin.

[@jaysmokin]

Thanks for letting us know. Can’t wait to try this on somebody

[@katebeedot6964]

Just a simple security question to a well chosen answer would do the trick

[@tesla-spectre]

Brilliant and important video

[@JohnMacphersonAllan]

Thanks Tom great and informative video cheers

[@2triangles]

Thank you for a great video.

[@tommacdougall]

Enjoyed your video, your thoughts on security keys?

[@wfodavid]

Scary stuff. Thanks making adjustments.

[@allezvenga7617]

Thanks for your sharing

[@tellmestraight]

Thank you!

[@rosestines66]

Thank you for sharing your knowledge about this topic very useful information that I didn’t know about n I understand that It could happen to me or anyone n I’m just glad to know about it now thanks again

[@swanstevenson822]

I have a security background and as recently migrating from Android phone to iPhone. I noticed this vulnerability right away. Fortunately, I have always relied on third-party software for backup storage and password management, so will continue this approach. Made me acutely aware that now I have a target on my back as an iPhone user. Best thing to do is be very discrete about where and when you use this device - and change login method based on your vulnerability. Before going to a bar or on vacation, change to fingerprint or face recognition - you can always change it back later.

[@David-vt9hr]

Wait could you explain it ?

[@martincoutts6747]

Great content, good job.

[@movingloz]

Wow 😮. What a great vid. So much important info. Thanks 🙏 heaps.

[@honeymonstermix]

Thank you for this very useful information. It confirms some things that I already suspected ( I have /do no banking info on phone or in the cloud) & made solid suggestions about safety.

[@jannertfol]

That's my approach as well. My phone is a Samsung, which I use ONLY for phoning and texting. My iPad is used only for emails and net surfing ...and my email programme is accessed via my browser, and I have to sign in and out of it every time. I don't carry ANY important data on either device. I do online banking, but ONLY from my desktop Mac at home. I don't use iCloud for anything at all. I try to keep my devices as separate from each other as possible. Apple doesn't like this, of course, and is constantly 'reminding' me to sign into the Cloud, to enable 2-factor authentication, etc. I've resisted thus far. I think we've fallen too easily into the 'convenience' thing. I prefer not to keep all my eggs in one basket.

[@legendpete8422]

Scary, but really helpful!

[@andyfx]

Great video. Thanks.

[@jesusmagas7096]

Enjoyed the video

[@Heartford]

Very helpful video!

[@Linkzelda99]

It’s nice to see a video of what was in the proper weekly

[@ProperHonestTech]

It's not something I'm going to make a habit of, but I came away from writing last week's newsletter thinking 'this really needs a video'...

[@Linkzelda99]

@@ProperHonestTech Well your videos are fine either way and it’s always so exciting when your newsletter comes out on fridays

[@Flavius_Tanigoi]

Another way to prevent this from happening or at least a method to slow them down is as follows. Open Settings - Screen Time - Content & Privacy Restrictions - scroll down to Allow Changes - select don’t allow changes to passwords & account changes. Remember these guys probably know what they are doing but this should buy you enough time to be able to lock your phone and report it as stolen from the find my app. Hopefully this doesn’t happen to anyone here but it’s never to late to take these precautions.

[@andy70d35]

Very informative video, hopefully people will listen to you.

[@ones9638]

You can use screen time passcode to lock access to icloud settings and passcode settings, as well as a lot of other useful stuff. definitely recommend setting up screen time.

[@justinvandervort7581]

Very good video! Lots of people need to watch.

[@jkennan]

Thanks for highlighting this. Lost a phone on a train some years back and, as far as I'm aware, it wasn't actually compromised as I've always used a 10 character alphanumeric code. By the time I'd got home to check, whoever had picked it up had already switched it off as Find My couldn't locate it (and never did subsequently). Battery was fully charged when I left home so switching it off it was a deliberate attempt to avoid detection.

[@super-ibby]

Fair, but this may offer a false sense of security. If I’m not mistaken, the WSJ piece mentioned that the thieves may have recorded the victim entering their passcode. So length and complexity will be of little deterrence/consequence. Just a heads up!

[@SisterFromAnotherPlanet]

@@super-ibby I believe he said they record the PIN, and that complexity IS a deterrent because it's much harder to get a 10+ alphanumeric code right

[@mathmanchris666]

@@super-ibby But lets be honest, if you are so consumed in your phone that you don't notice people around you recording you then at that point I mean, oh well. I mean yeah it's bad but you have to have some sort of awareness around you. Also this whole issue can be solved by just using Face or Touch ID while in public. Why are people so against biometric forms of identification

[@kevinmiles5770]

@@SisterFromAnotherPlanet not if its being video recorded.

[@Kenna198]

@@mathmanchris666 because of the “Illuminati” lol

[@thomascrown3816]

Fantastic! Thanks

[@thina8052]

Thanks for the information ☺️ What if I use Advanced Data Protection? Wouldn’t that help a lot?

[@olaniyanmichael640]

Good info.

[@steveh7216]

*Excellent presentation!* 🎥👍 _Hi Tom, I'm interested in what you think of these ideas..._ 1. Why don't Apple simply have a setting option where the phone needs double verification! (Face ID and Pin Code). It may be a slight inconvenience, but ladies whom get targeted most if they go to night clubs, can simply enable the feature before they go out. 2. The other idea is if they own an Apple Watch, that the watch has a feature that if the phone is a distance more than say 20 feet away; that the phone will instantly "Lock Screen". (no matter what mode it's in). What do you think? 😊

[@shrikantbmali]

Some fixes: to change iCloud password and pincode apple must mask for the password instead of only the pincode. Or have an alternative more secure secondary pin thats only required when one wants to change critical details like pin and iCloud password.

[@vickifrench1913]

Thanks I really appreciate your site and only wish I’d come across it so much earlier! Your information and advisory comments are truly invaluable.

[@ProperHonestTech]

Thank you very much!

[@HopefullyNotYou]

this is exactly why i loved touch id so much

[@raidraid6672]

Many thanks for yet another calmly and concisely articulated informative video. How do you feel about using Screen Time -content and privacy restrictions - to allow/don't allow passcode changes and account changes as a security measure to be followed by iPhone owners until Apple figures out a way to sort out this issue?

[@jaworq]

Screen time passcode reset resets also Apple ID password so.... quite useless

[@rahil4786]

Thanks

[@anelamilne3225]

Thank you. This scared me😮. But I got valuable info from you. Thank you. I will use this I have a tinted screen cover on my iPhone too.

[@delwoodbarker]

Thank you very much for your videos, especially this one. I thought I was more secure than I am with my poor passcode. Regarding secure files, I keep an encrypted disk image for my financial files. But I realize I want more of my files to be protected now. If I move files from my iCloud documents into a disk image file, then delete them from the unencrypted documents folder, what happens to the backups? Would someone be able to get my deleted sensitive files from backups in iCloud? I encrypt my Time Machine backups, and use an encrypted external drive when I can. What about my own backups in Time Machine? How long will my deleted files be recoverable there? Can I delete a file explicitly from my backups? Thanks again.

[@clivewuest8529]

Great channel you have here Tom, and this video is very informative. A chain is only as strong as its weakest link, and Apple have one here, but surely to limit the damage that can be caused is to request your current Apple ID password if you want to change your Apple ID rather than the pin number you use to unlock your phone. That way at least you will not loose control of your Apple ID and you will still be able to remotely wipe the phone. Nobody enters thier Apple ID password in public, so that would render having your pin number useless as the legitimate owner will still be able to wipe their phone. Simple fix for Apple I would have thought unless I am missing something. Clive

[@wisdomyaw03]

What if you've forgotten your AppleID password?

[@clivewuest8529]

@@wisdomyaw03 Well keep it safe somewhere else and you can always retrieve if you forgot. I would rather that than have all my personal info and bank accounts compromised

[@wisdomyaw03]

@@clivewuest8529 Well, while it's a great point, the thief in this case would still be able to access your icloud because they could login from the web, obtain SMS verification code sent to the same phone and change the password.

[@clivewuest8529]

@@wisdomyaw03 mmm. Good point. Oh well prevention better than cure. Never enter your password in public at any time then and make is 6 digits or alpha numeric

[@wisdomyaw03]

@@clivewuest8529 That's 💯 exactly the point. The problem starts from your primary phone unlock password/passcode. The moment it leaves you, all your digital life is exposed. While we hope that in the future more advanced methods of preventing such occurrences are made, it's our duty to safeguard out own passwords.

[@btbb3726]

Thank You! 👍🏻 I’ve been using a six digit code on mine for years.

[@lorimccoy5321]

Amazing content. Everyone’s worst nightmare experience

[@WNCDude]

It would be helpful to have passcode numbers actively change their positions to make it more difficult to ID the numbers. I saw this years ago at a parking lot entrance.

[@cordelearts]

Thanks for telling me how to break into some phones.

[@davidwinters1432]

Thanks!

[@ProperHonestTech]

Thank you very much!

[@elisabethlafontaine8979]

Thank you for this video. I do use Face ID but for other things I may key in an alphanumeric code. I will now make sure I shield these “events” from prying eyes.

[@egyoac]

I use Screentime restiction. Works like a charm

[@andybarnes1100]

Very good video - thanks. Possible solution for Apple (which you may have better access to than most subscribers to your channel) - change the position of each character on the numeric keyboard for the passcode each time it is accessed. I have seen this done on a POS device which needed a PIN code. Would stop most people from copying the passcode as it is often the pattern of what is pressed rather than the number itself that is memorised. An easy software fix which would stop a percentage of these cases from arising (wouldn’t stop the person who can remember a six digit passcode by numbers though 😕)

[@checkout62]

Thanks will subscribe

[@adammachin]

Odd for them to not require the existing password in full to change it.

[@1TexasKid]

Glad you made this Apple security warning. I am shocked that Apple is not doing anything to change it. Why not use a two device identification to prevent ID theft. The 2nd device would have the deciding authentication confirmation factor. Or call Apple to give verbal answers to preset authentication questions.

[@dornus336]

and how exactly should this work when you only have a single iphone?

[@almarma]

@@dornus336 There’s a very simple way to implement a solution: don’t allow to change the iCloud password unless you have a secondary device or answer a security question. That’s how it should be from the beginning. Yes, a thief can still rob your iphone and if they get to see your PIN code, they could get to the main screen, but they wouldn’t be able to lock you from your account or your photos and would not be able to unlock yourself from your own device. A friend of mine suffered this same kind of attack while on holidays and lost everything. All his photos and digital life connected to it, and Apple said to him they could do nothing to help him. That would really piss me off as I have more than 600GB of photos and videos and many personal documents there too, plus a lot of purchased apps. Security experts say that your security is only as safe as your weakest point. A simple 6 numbers code is a really weak point for your whole iCloud account.

[@lesliebenjamini5841]

So if I only use my iPad at home how do I set it up as the device to have the deciding authentication?

[@andrewmorgan1819]

Or just make you input your AppleID password to change your password and to add new biometrics.

[@mysticdragon77]

Apple has added the option to add physical keys that are required to change your Apple ID password. This is the highest security you can add. It’s not promoted though but I’ve added 2 security keys to my phone.

[@davidbeckett1565]

A fingerprint sensor on the lock button would be a good feature. Failing that, adding a security key (like a Yubikey) for 2FA is more secure than SMS.

[@chelin7023]

Best video ever!

[@sarahphillips295]

Great video. I use FaceID or the fingerprint scanner on my iPad mini for this exact reason. Apple does need to give users the option to have additional layers of security enabled before an Apple ID password can be changed. Just a device password is not enough enough. This story is a perfect example of what can happen if that password is able to be changed too easily. If you don’t know the old password, the only way it should be able to be reset is with a link sent to the iCloud email or at an Apple Store with government ID. It is smart to have a strong password and if you ever have to enter it in public, never enter it in a crowd and be hyper aware of who is around you.

[@boobee_nyc]

I use Face ID exclusively but there are very few instances that Face ID fails for whatever reason and the phone prompts for the passcode. While I'm cautious about letting anyone see me enter it but dang I never realized how much damage someone could do knowing it. This is most certainly eye opening. Wow!

[@TheBrilliantShadow]

11:38 You have better options for storing data. Apps like Scanner Pro (I just happen to use this one myself) allow for additional passcodes, so your scans are safe. Also, Disk Decipher is a great option to have encrypted storage on your phone - or your NAS - that also works on your computer! Makes sharing sensitive data easy and safe!

[@billyg8614]

Great video Tom! IMO, In order to change your iPhone passcode, Apple should require you to enter your Apple ID password.

[@SisterFromAnotherPlanet]

You can choose that in settings!

[@Tengaii]

@@SisterFromAnotherPlanet Where?

[@jamesosullivan7969]

Wouldn't make a difference if your AppleID password is in your keychain, which it is for most people.

[@SisterFromAnotherPlanet]

@@jamesosullivan7969 Mine only fills in with Face ID.

[@iphonesecurity]

I made video on this too! Love your channel. The Wall Street Journal also has a great video on how they use the recovery key to permanently lock your recovery key. This happened to over 40 of my friends at our local bar, we identified the thieves but they never got arrested and made hundreds of thousands of dollars. This is very common and serious.

[@runshoottech]

My passcode for years now has been a whole sentence and my friends always thought I was just being over protective, now there is this threat and they see more of a reason to have a longer password.

[@tjwash5118]

Mine is my favorite singer, my friends all know my favorite singer because I talk about her all the time. If I wrong one of them and they get my phone it’s all over, I can’t burn any bridges.

[@runshoottech]

@@tjwash5118 lol, keep those bridges intact my friend 😂

[@alicias2915]

Also using a security screen protector helps also as you can’t see from even a short distance . I have one and love it. Someone next to you can’t see your screen.

[@jerryfacts9749]

When I am in a public place near to other people I never unlock my phone. Also, I very rarely take my phone out of its locking holster when near to other people. There are people who who devised ways to fool the face and finger print ID. For any phone, if someone gets hold of your phone and they know the password this is a huge issue. Because they have your phone they can use the two step authentication with the phone number.

[@ruthp49]

Brilliant

[@darkwolf41nite53]

So use the faceID an passcode would be the best correct!??

[@ompomromdom]

FIDO Yubikey - Would adding it to ios prevent that or not much ?

[@AlexK-vp9jd]

That’s absolutely helpful info however I feel like it’s also teaching bad people how to do it. So scary how vulnerable we are. Thank you, but you are correct, this help us create a more secure password.

[@robertsleight8013]

I am new to the iPhone was just wondering if it was possible to make it so that you only need a pass code to wake up the phone but a biometric access settings?

[@kellymeredithdc7436]

I think that if you have 2 separate codes would be best. One to get in and another for accessing info on the phone. It would be 2 codes you would need to remember.

[@lukewilson1092]

3:43 this is a little tip. you can use screen time to completely hide the FaceID page using a screen time passcode (which can be different from your main passcode) and go into content restrictions, scroll down, and change passcode changes. to disallow. plus, you can lock out the Apple ID settings by disabling account changes from this same page

[@Nikalette100]

I decided to make a wait time between Face ID and passcode since it happened immediately. I am testing with a minute to see if I like it. I love the thumb print on the IPad but there is no option for wait time, it will only leave immediate as an option. Is there a way to change this? I have an IPad 9th generation.

[@jkoneill]

Great content! You covered the face ID/ biometrics aspect. I get so frustrated with creators & Apple for that matter refer to face ID as great security when in reality it is just a convenient way to unlock your phone. The second it fails your phone will ask for the passcode. There has to be a better way. Perhaps touch ID that won't open your phone when failed. Thank you for the upload 👍

[@fabsgwu]

It’s sort of the reverse: if you’re only using Face ID then people can’t glean your passcode. If it fails (try again?), but you have a very simple passcode and are not guarded about entering that code that’s where the risk comes in. The best course of action (now) is to use an alphanumeric code and treat it like entering a pin at an ATM. You can also optionally only use numbers with the alpha option, then the thieves wouldn’t know the length of code like on the 4 or 6 digit code options. Using screen-time and separate code to limit account changes can be a speed-bump to delay thieves from changing the iCloud password, but unfortunately this protection can be bypassed. Would-be thieves can also use strategies like asking to take a photo and squeezing the sleep/volume buttons as they hand the phone back to trigger passcode entry requirement to unlock-again, this is where careful passcode hygiene is most important. It should be pretty rare that a passcode is needed if you’re holding it right (to paraphrase Steve Jobs), but Apple definitely needs to make some security enhancements to protect against this problem.

[@mathmanchris666]

Face ID only fails when you don't position your phone within view of your face multiple times. You have multiple chances to get it right. Just be competent and when it gives you that first failed, correct it accordingly please.

[@jkoneill]

@@mathmanchris666 not so. Face ID 'fails' / rejects every several days. It's not about positioning it's embedded to force user to enter PIN

[@Nikalette100]

I decided to make a wait time between Face ID and passcode since it happened immediately. I am testing with a minute to see if I like it. I love the thumb print on the IPad but there is no option for wait time, it will only leave immediate as an option. Is there a way to change this? I have an IPad 9th generation.

[@darryllspalding9680]

perhaps the international police could train more people in putting a stop to cyber crime. ther is an Irish felka on you tube who can hack the cctv systems of scammers, trying tonloot your grandmas savings(your maybe inheritence), cut off their hands ! Its the law for theft in a lot of these countries.

[@chucksherman6017]

I started using anti spy screen protector to limit access to the screen visual properties and thank you for your video

[@user-hr8pt4rp4f]

Dear Proper Honest Tech, Your knowledge and support is greatly appreciated. I will make changes as you recommend immediately! Please continue your support! Also Thankful I found your video.

[@JustAPersonWhoComments]

2:21 ur actually right. Kind of, but the green screen is used by the 12 Pro instead.

[@seanbrown8920]

What do you know about the Pegasus software?

[@anteeko]

Does setting up security keys (like Yubikeys) would help?

[@composernotes]

Thanks for this video and your great channel. I use Keychain but NOT for my bank account. That is one password/passcode I make myself remember

[@Dk-qf8dd]

Biggest thing, and not that hard of a change, the access code to your Apple Device should be for access only. Not for changing passwords or settings. And Settings > Password should be behind a code/password/biometric that is NOT the access code. BTW - a lot of this also affects Android. You’re not safe there either.

[@suqmaddiqq]

For Android it depends on the OEM. Samsung have countermeasures for a lot of these.