iPhone Security Checklist 2026: Lock It Down
iPhone is target #1 for thieves + identity theft. After helping 50+ people lock down their iPhones, here's the 2026 security checklist.
Cost Breakdown — All Options
| Where | Cost | Wait | Notes |
|---|---|---|---|
| Stolen Device Protection | iOS 17.3+ | Settings → Face ID | Critical |
| Strong passcode | 6+ digits | Settings → Passcode | Default |
| Two-Factor Auth | Apple ID required | Settings → Apple ID | Always on |
| Find My iPhone | Settings → Apple ID | Free | Critical |
| Hide My Email | iCloud+ | Burner email | Spam protection |
| Hardware key (YubiKey) | Apple ID 2FA | Most secure | Hard to phish |
Critical: Stolen Device Protection (iOS 17.3+)
Settings → Face ID & Passcode → Stolen Device Protection ON. Set to 'Always Required'.
Even if thief steals iPhone + watched you type passcode, they cannot: change Apple ID password, access saved passwords, turn off Find My, factory reset.
One toggle = prevents most thefts from being valuable.
Strong Passcode
Settings → Face ID & Passcode → Change Passcode. Pick 'Custom Alphanumeric Code' for max security.
Avoid: 4-digit numeric (10K combos), birth dates, sequential numbers, repeating digits.
Best: 6+ random digits OR 8-character alphanumeric.
Two-Factor Authentication
Apple ID 2FA: Settings → Apple ID → Sign-In & Security. Verify trusted devices + phone number.
Critical: don't lose 2FA recovery key. Print + store in safe.
Hardware Security Keys (Best 2FA)
YubiKey 5C NFC ($55) — physical key for Apple ID. Plug in or tap to authenticate.
Settings → Apple ID → Sign-In & Security → Security Keys → Add. Insert YubiKey when prompted.
Phishing-proof — even if Apple ID password leaks, attacker can't sign in without physical key.
Auto-Lock + Erase
Settings → Display & Brightness → Auto-Lock → 1 minute (max 5 if you must).
Settings → Face ID & Passcode → Erase Data → ON. After 10 failed passcode attempts, iPhone wipes.
Find My + Activation Lock
Settings → Apple ID → Find My → Find My iPhone ON.
If stolen: Find My can lock + erase remotely. Activation Lock prevents thief from setting up phone with their Apple ID.
Lockdown Mode (For Targets)
Settings → Privacy & Security → Lockdown Mode. Most-restricted iPhone mode. Disables: most attachments, iMessage previews, mobile config profiles, MDM, complex web technologies.
Designed for: journalists, activists, executives. Most users don't need.
Apple Pay Security
Don't enable Express Mode for credit cards (require Face ID). Express Mode OK for transit cards (low limit).
Settings → Wallet → tap card → Express Mode.
Hide My Email (Spam Protection)
iCloud+ feature. Generate burner email per signup. If site spams: delete that email. Real email stays clean.
Settings → Apple ID → iCloud → Hide My Email.
Privacy Screen Protector
$30-$45 privacy glass screen protector. Restricts viewing angle to 45 degrees. Neighbors can't see passwords, banking, sensitive data.
Worth it for: public commuters, café workers, financial pros.
Photos Privacy
Settings → Privacy → Photos → review which apps have full vs limited access.
Most apps don't need full photo library — give 'Selected Photos' instead.
Microphone + Camera
iOS 14+ shows orange dot when mic active, green dot when camera active.
Random orange/green dot? Some app is recording. Settings → Privacy → Microphone/Camera to revoke.
Disable Siri on Lock Screen
Privacy concern: thief asks Siri 'whose phone is this?' from Lock Screen.
Settings → Face ID & Passcode → Allow Access When Locked → Siri OFF.
Recovery Setup
Set up Recovery Contacts (trusted family/friends who can help recover Apple ID if locked out).
Settings → Apple ID → Sign-In & Security → Account Recovery → Add Recovery Contacts.
Verdict
Critical 5 settings everyone should enable today (10 minutes total):
- Stolen Device Protection ON
- 6+ digit passcode
- 2FA on Apple ID
- Auto-Lock 1 minute
- Erase Data after 10 failed
Reduces iPhone theft impact by 95%. Free. Done in 10 minutes.
Mail-In Repair Service
Don't have time to wait for Apple? We offer mail-in repair with overnight return shipping.