Apple

Best ways to secure your Apple iPhone

By // August 4, 2010, 1:27 AM PST // ensable

Image 1 of 12

  • Keep the firmware up to date

    Follow this visual tutorial for securing your iPhone, compiled by Michael Kassner. You can also view these steps in the blog version here.

    Like computer operating system software, keeping iTunes and iPhone's firmware up to date is important in reducing the vulnerability footprint. iTunes is at version 9.2.1.4. Here's where to determine the version and check for updates.

  • Check for the latest version

    The latest version of iPhone firmware is different for the three hardware versions. The iPhone 3 is using version 3.2.0. The newest version for the iPhone 3Gs and iPhone 4 is 4.0.1. Select Settings | General | About to determine what version your iPhone is using.

  • Update firmware

    If the iPhone is using an older version, follow the steps below to update the firmware:

    1. Connect the iPhone to the computer.
    2. Open iTunes.
    3. Select iPhone under Devices in the source list.
    4. Select Check for Update.
    5. Select Download and Install.?

  • Turn off Wi-Fi when it's not needed

    This is self-apparent, yet important enough to include in the list. Most people automatically disable Wi-Fi to conserve the battery. But knowing that disabling Wi-Fi eliminates an attack vector may be added incentive to turn Wi-Fi on only when needed. Use the following steps to disable Wi-Fi:

    1. Tap Settings.
    2. Tap Wi-Fi.
    3. Turn Wi-Fi off.?

  • Disallow automatic association to networks

    By default, the iPhone retains association settings of the Wi-Fi networks it connects to, which allows the phone to automatically reconnect when within range. Automatic association isn't recommended, as it's easy to spoof trusted networks. Still, disallowing automatic association is kind of a pain, requiring you to enter the passkey each time. To prevent automatic association use the following steps:

    1. Tap Settings.
    2. Select Wi-Fi (make sure Wi-Fi is on).
    3. Tap the blue arrow of the network to forget.
    4. Select Forget This Network.

  • Turn off Bluetooth

    Features that make life easier for the user tend to make it easier for bad guys as well. Bluetooth is one such feature; it allows many conveniences, such as the use of wireless headsets and sharing information between phones. Yet attackers can also use it to Bluejack or Bluesnarf a phone. For some reason, the iPhone isn't set up to just turn off discovery. So the only way to prevent unwanted discovery and associations is to use the following steps to turn Bluetooth off:

    1. Pick Settings.
    2. Tap General.
    3. Tap Bluetooth.
    4.Turn Bluetooth off.

  • Disable location services until needed

    Turning location services off doesn't immediately increase security; it just prevents the user's location from being published. I personally think disabling the service is a good idea for two reasons. First, it's a significant battery drain. Second, disabling the service isn't an inconvenience. It's simple to turn the location service back on from within the application that needs positioning information. If so desired, follow the steps below to disable location services:

    1. Tap Settings.
    2. Tap General.
    3. Turn Location Services off.

  • Set a passcode

    Setting a passcode definitely increases the security of the iPhone. It makes it harder for someone to gain access to the iPhone because the phone automatically locks after a user-determined amount of inactivity. Setting a passcode is also required for feature seven to work. Use the following steps to set a passcode on operating systems prior to iOS 4:

    1. Select Settings.
    2. Select General.
    3. Tap Passcode Lock.
    4. Enter a four-digit passcode.
    5. Re-enter the same passcode.

    Apple changed the passcode options in iOS 4 as four digits are relatively easy to guess. In iOS 4, secure passcodes let you use any combination of letters, numbers, and punctuation. To enter a secure password, turn off Simple Password and enter the new secure one.

  • Set auto-lock timeout

    The iPhone can be configured to auto-lock after a certain length of inactivity. If a passcode is used, the iPhone will automatically lock after one minute of inactivity. I set mine to 5 minutes. It's a pain, but if the phone gets snatched, auto-lock adds a layer of protection. Follow the steps below to enable auto-lock:

    1. Select Settings.
    2. Tap General.
    3. Choose Auto-Lock.
    4. Pick the amount of time that suits your needs.

  • Erase data if too many wrong passcodes are entered

    After 10 wrong passcode attempts, user settings and any data stored on the iPhone will be erased if this setting is enabled. It's a valuable feature ensuring that any sensitive information will not get into the wrong hands. Use the following steps to turn erase data on:

    1. Select Settings.
    2. Tap General.3. Choose Passcode Lock.
    4. Turn Erase Data on ( as shown above). After you turn Erase Data on, you should see this confirmation screen.

  • Erase data before returning or repairing the iPhone

    To some, this may be apparent, but many people don't even think about removing sensitive data before selling or sending their phone in for repair. Use the following steps to prevent others from accessing your personal information:

    1. Select Settings.
    2. Tap General.
    3. Choose Reset.
    4. Select Erase All Contents And Settings.

  • Disable JavaScript and plug-ins in Safari

    Because the iPhone uses a fully functional Web browser, making it susceptible to JavaScript exploits, I recommend disabling JavaScript, but doing so breaks certain Web page characteristics. It's yet another balancing act between security and usability. If you want to err on the side of security, use the following steps:

    1. Select Settings.
    2. Tap Safari.
    3. Turn JavaScript off.

Keep the firmware up to date

Follow this visual tutorial for securing your iPhone, compiled by Michael Kassner. You can also view these steps in the blog version here.

Like computer operating system software, keeping iTunes and iPhone's firmware up to date is important in reducing the vulnerability footprint. iTunes is at version 9.2.1.4. Here's where to determine the version and check for updates.

Related Topics:

Apple Mobility Hardware Innovation Software Consumerization Cloud

By Selena Frye

Selena has been at TechRepublic since 2002. She is currently a Senior Editor with a background in technical writing, editing, and research. She edits Data Center, Linux and Open Source, Apple in the Enterprise, The Enterprise Cloud, Web Designer, and...