Apple Responds to Report About Thieves Permanently Locking Out iPhone Users

The Wall Street Journal's Nicole Nguyen and Joanna Stern today published a report highlighting how thieves can use Apple's optional recovery key security option to permanently lock out iPhone users from their Apple ID account.

iphone passcode green
As the journalists first revealed in February, there have been increasing instances of thieves spying on an iPhone user's passcode in public and then stealing the device in order to gain widespread access to the device and its contents, including financial apps. All of the victims interviewed in the initial report said their iPhones were stolen while they were out socializing at bars and other public places at night.

With knowledge of the iPhone's passcode, a thief can easily reset the victim's Apple ID password in the Settings app, even if Face ID or Touch ID is enabled. Subsequently, the thief can turn off Find My iPhone on the device, preventing the owner of the device from tracking its location or remotely erasing the device via iCloud.

Today's report places more focus on an additional step that thieves can take: using the stolen device to set or reset a recovery key, a randomly generated 28-character code that is required to regain access to an Apple ID once enabled.

"Apple's policy gives users virtually no way back into their accounts without that recovery key," the report states. With unmitigated access to a stolen iPhone, the device's passcode, and the Apple ID password, thieves can steal money via Apple Pay and potentially other banking apps, view sensitive information like photos and emails, and more.

Apple's website does warn that losing access to both your trusted devices and recovery key means that "you could be locked out of your account permanently." In this scenario, however, thieves spying on iPhone passcodes before stealing the devices means that victims only need to lose their device in order to potentially be permanently locked out. The report serves as a valuable reminder to protect your iPhone's passcode in public.

For more details, read our previous coverage.

Apple Responds

In a statement shared in response to the report, Apple said it is "always investigating additional protections against emerging threats like this one."

"We sympathize with people who have had this experience and we take all attacks on our users very seriously, no matter how rare," an Apple spokesperson told The Wall Street Journal. "We work tirelessly every day to protect our users' accounts and data, and are always investigating additional protections against emerging threats like this one."

How to Stay Protected

iPhone users should use Face ID or Touch ID as much as possible when in public to prevent thieves from spying on their passcode. In situations where entering the passcode is necessary, users can hold their hands over their screen to hide passcode entry.

The report also recommends that users switch from a four-digit passcode to an alphanumeric passcode, which would be more difficult for thieves to spy on. This can be done in the Settings app under Face ID & Passcode → Change Passcode.

To protect a bank account, consider storing the password in a password manager that does not involve the device's passcode, such as 1Password.

Users can enable Screen Time parental controls to further lock down their device, the report adds.

Top Rated Comments

cgs1xx Avatar
9 months ago
So, Apple’s response was “aahh… sympathies” ?
Score: 28 Votes (Like | Disagree)
bunty Avatar
9 months ago
So we're gonna have our 989 post conversation all over again?

The point is the passcode to unlock an iPhone can also be used to access or recover anything that asks for your Apple ID password...if you forget or pretend to forget your Apple ID password. Try it. It's all covered in the other conversation thread.

The screentime passcode can be circumvented easily.
Score: 27 Votes (Like | Disagree)
brandoman Avatar
9 months ago
All one has to do is turn on Screen Time > Content & Privacy Restrictions > Passcode Changes > Don't Allow. Be sure to use a different passcode for Screen Time.

Oh, and Account Changes (Don't Allow). Thanks for that tip @ypl.

Score: 24 Votes (Like | Disagree)
RamGuy Avatar
9 months ago
Is this even the case anymore? When I try to disable Find My, I'm prompted for my Apple ID password, not my passcode. Same if I try to log out of iCloud, this requires me to disable Find My as a part of the process prompting me t verify with my password, not my passcode.

All of this is common sense. You can't expect a 4-digit passcode to be all that secure. If you feel paranoid, use an alphanumeric passcode, aka password, instead.
Score: 21 Votes (Like | Disagree)
ELman Avatar
9 months ago
Essentially, be responsible for the device you own. It's not our issue.
Score: 20 Votes (Like | Disagree)
zorinlynx Avatar
9 months ago
This would be less of an issue if iOS didn't randomly fail to FaceID and ask for a passcode, often at the least convenient time.

I wish Apple would get this resolved.
Score: 19 Votes (Like | Disagree)

Popular Stories

iPhone 15 General Feature Black

New iOS Features Coming in 2024 for Messages, Apple Music, and More

Thursday December 28, 2023 7:30 am PST by
2024 is just a few days away, and there are many iOS 17 and iOS 18 features that are expected to launch throughout the year. Below, we have recapped new iOS features expected in 2024, including Stolen Device Protection, collaborative Apple Music playlists, AirPlay on hotel room TVs, app sideloading in the EU, next-generation CarPlay, roadside assistance via satellite outside of the U.S., RCS ...
iOS 17

iOS 17.3 Will Add These Two Useful Features to Your iPhone

Sunday December 24, 2023 8:59 am PST by
Apple released the first beta of iOS 17.3 earlier this month, and the upcoming software update includes two new features so far. iOS 17.3 will likely be released in January like iOS 16.3 and iOS 15.3 were, but February is also a possibility if testing is prolonged. Below, we provide additional details about the new features in iOS 17.3 so far. Stolen Device Protection Earlier this...
iPhone 17 Five Features Header

iPhone 17: Five Features Apple Plans to Save for 2025

Thursday December 28, 2023 2:00 am PST by
Apple's iPhone development roadmap runs several years into the future and the company is continually working with suppliers on several successive iPhone models concurrently, which is why we sometimes get rumored feature leaks so far ahead of launch. The iPhone 17 series is no different, and already we have some idea of what to expect from Apple's 2025 smartphone lineup. If you plan to skip...
Mac Gaming

Apple Discusses Push Towards High-End Mac Gaming in New Interview

Thursday December 28, 2023 6:19 am PST by
Inverse's Raymond Wong today published an in-depth overview of Apple's increasing push towards high-end gaming on the Mac. The story includes commentary from Apple marketing managers Gordon Keppel and Leland Martin. One of the biggest reasons that gaming has improved on the Mac in recent years is the switch from Intel processors to Apple silicon, resulting in MacBooks providing...
Apple Watch Series 9

Apple Watch Series 9 and Ultra 2 Available in Apple Stores Starting Today, Online Sales to Resume Tomorrow

Wednesday December 27, 2023 2:28 pm PST by
Apple Watch Series 9 and the Apple Watch Ultra 2 are back in some of Apple's retail stores in the United States today, according to Bloomberg's Mark Gurman. Select stores will have availability today, while all stores will have the Apple Watch models back in stock by December 30. Online sales of the devices are set to resume tomorrow by 12:00 p.m. Pacific Time. Apple is able to begin selling ...
iPhone 15 Blue Three Quarters Perspective Camera Closeup Feature

6 Essential iPhone Camera Tips for Taking Great Photos

Tuesday December 26, 2023 3:00 am PST by
Apple's iPhones include several headline camera features that are worth using, such as Portrait Mode and Photographic Styles. But if all you want to use is the standard photo mode, there are still several tools and settings that can improve the composition of your pictures and help you capture the perfect shot using more traditional techniques. Whether you are the owner of a new iPhone or a...
Apple Watch Series 9

Apple Watch Series 9 and Ultra 2 Sales Ban Paused by US Appeals Court

Wednesday December 27, 2023 8:49 am PST by
The ban on imports of Apple Watch Series 9 and Apple Watch Ultra 2 models has today been temporarily paused, meaning that the devices can now go back on sale for a short while longer in the United States. Apple filed an emergency request to the United States Court of Appeals following President Biden's decision to decline a veto on the sales ban, allowing it to take effect earlier this week. ...