Apple announces new security features to protect iPhone users from theft or cyberattacks

While mobile phone security continues to improve, there is still a big question: what happens when a user's phone is stolen? Over the years, mobile phone manufacturers have added new features to help users find or lock their phones if they are lost or stolen.

Apple has always boasted that the iPhone is famous for its security and that the iOS operating system is generally difficult for hackers to attack. But statistics show that the iPhone is still one of the most stolen mobile devices in the world due to its value in the market.

In fact, data provided by the London Metropolitan Police (UK) reveals that in 2022, 90,864 mobile devices were reported as stolen in London alone, which translates to around 250 phones being stolen every day in the city.

In another report by UK-based multinational auditing firm Deloitte, it was said that it is easy to access the owner's email address, contacts, photos and other features on a stolen smartphone, despite the many security features on mobile devices.

Reports also suggest that stolen iPhones can pose a greater threat as thieves can simply reset the victim’s Apple ID password, disable the “Find My iPhone” feature, view passwords stored in Apple’s password management system (iCloud Keychain) for bank and email accounts, and more. Simply put, thieves can steal an individual’s entire digital life just by accessing their smartphone.

This is a real fear for mobile phone users. Since almost all of our data is stored on our mobile devices today, be it personal or work data, thieves can use this data to create more havoc. For example, if a thief can unlock a stolen iPhone, they can use it to demand money, make purchases, or even access personal photos to create realistic fake images and sounds (deepfakes) on the device.

Responding to user concerns, mobile phone manufacturers in general and Apple in particular have created solutions to address this issue. These include “Find My Phone” and “Lost My Phone” features. Certain apps also have kill switch features that can block access to them if the device is compromised.

However, a report by The Wall Street Journal (USA) in 2023 pointed out how thieves can use Apple's Recovery Key security option to permanently lock iPhone users out of their Apple ID accounts.

Apple improves security features for iPhone

In response to growing concerns about thieves accessing stolen iPhones and changing Apple ID user passwords, Apple is introducing a new security mode for iPhones. The “Stolen Device Protection” feature aims to protect users when thieves or even cybercriminals know their private Apple ID password.

According to a report by CNBC (USA), the “Stolen Device Protection” feature will create a second layer of security, making it more difficult for thieves to use the passcode to damage a stolen or compromised device.

Accordingly, in the event that the iPhone is in an unfamiliar location, usually unrelated to its owner, when the “Stolen Device Protection” feature is turned on, the device will require Apple’s FaceID facial recognition feature along with the passcode for the user to perform sensitive actions, such as viewing saved passwords or erasing the phone. It also causes additional delays when changing the user’s Apple ID password.

Apple is enabling multi-factor authentication on its devices, so even if a phone is stolen, the thief won’t be able to unlock it. The victim can then access “Find My Device” to locate it or simply lock it.

“As threats to our users’ devices continue to evolve, we develop new protections for our users and their data. iPhone encryption has long been industry-leading, and a thief cannot access data on a stolen iPhone without knowing the user’s passcode. In the rare cases where a thief can observe a user entering a passcode and then stealing a device, Stolen Device Protection adds a sophisticated new layer of protection,” an Apple spokesperson explained.

With “Stolen Device Protection,” Apple essentially prompts every iPhone user to enter a four-digit or six-digit passcode when the device is turned on. Before the new feature was added, Apple’s privacy and stolen device protections, including its FaceID facial recognition tool, were tied to that passcode, allowing anyone with a stolen device and passcode to take full control of the phone.

The new feature will be available to people with the latest developer beta of iOS 17.3. The opt-in feature will roll out to other iPhone users in the coming weeks when iOS 17.3 is released to the public.

Other ways to secure your mobile device

While Apple has revealed its security plans for the iPhone, other phone manufacturers have their own mechanisms and features to secure and lock down devices if they are lost or stolen. However, users still need to be vigilant when using their devices and be mindful of setting up a passcode for their devices.

Here are some ways to secure your mobile device from cyberattacks, theft, or loss:

- Use strong passwords, biometrics, or two-factor authentication to lock your device and prevent unauthorized access.

- Encrypt devices and data so that anyone without the decryption key cannot read them.

- Install reputable antivirus software and keep it updated to scan and remove any malware or viruses from your device.

- Avoid using public or free Wi-Fi networks that are not encrypted or secure, as they can expose your device to hackers and eavesdroppers. Use a virtual private network (VPN) to encrypt your internet traffic and hide your online activity.

- Only download apps from trusted sources, such as official app stores, and check permissions and reviews before installing them. Avoid clicking on suspicious links or attachments that may contain malware or scams.

- Regularly back up data to a cloud service or an external device, such as a USB drive, in case the device is lost, stolen, or damaged. Users can also use the remote wipe feature to erase data from a lost or stolen device.

- Update your device's operating system and applications to the latest version to fix any security vulnerabilities and bugs that could compromise your device.

- Be careful with what is shared on social media or other online platforms, as hackers can use personal information to guess passwords, answer security questions, or target victims with phishing or social engineering attacks.