Three ways to lock down your iPhone 

Most of us don’t think about the vast army of criminals that are out there trying to steal our data and break into our bank accounts and other online services. But they are out there. And they are becoming more determined to do everything from steal money to compromise governments. What can we do to stop them? Lock down your iPhone.

Over the last few weeks I’ve looked at how to secure Safari and protect your user accounts using the tools on your Apple devices. Those are important but there is more you can do. 

For most of us, the iPhone is the hub of our online life. Our iPhones connect us to friends, family, places we like to shop, our banks – they even help us meet new friends and even find love. And that makes your iPhone a honeypot those criminal bees are looking to swarm on. 

Let’s look at three things you can do to lock down your iPhone.

1. The nuclear option: Lockdown Mode

Apple introduced Lockdown Mode as part of the release of iOS 16 in 2022. It goes to quite extreme lengths to minimise the risk of someone sending a malicious attachment or even contacting you. 

To enable Lockdown Mode:

i. Open the Settings app, scroll down and tap on Privacy & Security

ii. Scroll down and tap on Lockdown Mode

iii. Tap on Turn On Lockdown Mode

You can also enable Lockdown Mode on an iPad or Mac by following a similar procedure. 

Lockdown Mode disables a number of connectivity and app services.

• Most message attachment types are blocked in the Messages app with a small number of exceptions. Features such as links and link previews are unavailable. 

• The system blocks certain web technologies, it may blocks web fonts from displaying and replaces some images with a missing‑image icon.

• Incoming FaceTime calls are blocked unless you have previously called that person or contact within the past 30 days. Features such as SharePlay and Live Photos are unavailable.

• Apple services, such as Home app invitations, Focus and related status features will not work as expected. Game Centre will be disabled.

• When you share photos location information will be excluded. Shared albums are removed from the Photos app and new Shared Album invitations are blocked. You retain access to shared albums on other devices that haven’t enabled Lockdown Mode.

• A locked iPhone will not connect to an accessory or another computer over a wired connection. 

• Wireless connectivity is blocked while the device is locked. You won’t automatically join non‑secure Wi‑Fi networks such as those in airport lounges and other public spaces.

• You can’t install configuration profiles, enrol the device in Mobile  Device  Management (MDM) or enable device supervision. However, if you already enrolled the device before turning on Lockdown Mode, it will remain enrolled in MDM.

While these measures will protect your device from a large number of potential threats, there are significant impacts on usability. You can configure some exclusions if there are trusted apps and websites that you would like to access in Lockdown Mode.

If Lockdown Mode is too extreme for you or you think the impact on your use and the risk you assess is low, then there are some other things you can do.

2. Use a passcode and FaceID or TouchID

Every iPhone user should have a passcode on their device. While not impossible, it is extremely difficult to unlock an iPhone that is secured with a passcode. There are government agencies that have access to tools that allow them break into locked devices. And there are private companies that provide this service under very strict guidelines.

I recently looked into this for a friend who wanted to access the iPhone of a deceased relative. The cost was in excess of $5,000. 

It’s worth noting that using a biometric tool like FaceID which uses facial recognition or TouchID that uses a fingerprint is very secure. Your iPhone does not store your actual face or fingerprint. The camera or fingerprint sensor takes very fine measurements, converts those measurements into a data sequence, encrypts the sequence, and then stores it. When you use Face ID or Touch ID to log into your device, or when you provide a passkey to sign into an online service, the device sends only a “yes” or “no” to the log‑in service, the app, or the website.

If you don’t enable a passcode and FaceID or TouchID when you set your iPhone up you can do it now.

i. Open the Settings app, scroll down and tap on FaceID & Passcode. If you have a device with TouchID, the appropriate option will say TouchID and Passcode.

ii. Then follow the instructions for setting up a passcode and either FaceID or TouchID.

If you’re using TouchID, it’s a good idea to set up more than one finger just in case you have an injury. 

3. Stolen Device Protection

Stolen Device Protection minimises the risk that a theft that steals your iPhone can access any of your personal information. The system prevents a thief from selling and reusing the device, even if they manage to factory‑reset it.

Before you can enable Stolen Device Protection, you must turn on Two-Factor Authentication on your Apple account. 

To turn on Stolen Device Protection 

i. Go to Settings, scroll down and tap on Face ID & Passcode (on an older iPhone, this will be TouchID and Passcode)

ii. Enter your device passcode

iii. Tap Stolen Device Protection and enable Stolen Device Protection

iv. Also choose Always for Require Security Delay

If a thief has your passcode and guesses it, they will still need FaceID or TouchID to unlock the device. Enabling Security Delay means that even if a thief tries to disable Stolen Device Protection they will require a biometric to make the change and there will be a one hour delay between them trying to change the setting and actually being able to change the setting. 

When Stolen Device Protection is enabled and your device is in an unfamiliar location you’ll need Face ID or Touch ID to:

• Use passwords or passkeys saved in Keychain
• Use payment methods saved in Safari (AutoFill)
• Turn off Lost Mode
• Open a locked app 
• Erase all content and settings 
• Apply for a new Apple Card 
• View your Apple Card or Apple Cash virtual card number
• Take certain Apple Cash and Savings actions in Wallet (for example, Apple Cash or Savings transfers)
• Use your iPhone to set up a new device (for example, Quick Start)
• Set up or transfer an eSIM

One of the prime motivators for thieves is money. Many criminal enterprises treat crime as business where they seek to maximise their return on investment. By making life as hard as possible for criminals, we increase the amount of time it takes for them to receive that return. And that makes us far less attractive targets.

Some people say security is about trying to outrun the criminals and stay ahead of them. That’s true. But by sharing this advice with your friends and colleagues, we can all make ourselves safer. After all, a rising tide lifts all boats.