How to Fix the FATAL FLAW in iPhone's New Security Feature 

• UPDATE: Apparently the iOS 17.4 beta has added an option to always require a security delay even at familiar locations, which is a great step. I still really want the ability to specifically choose the familiar locations, to prevent the passcode from being used at all for important tasks. • ANOTHER TIP: I didn't mention this but several have mentioned that you can actually use the "screen time" feature to add a second separate required passcode for certain functions like account changes. It's a great option but might make it annoying to access other settings like info in the icloud menu.

if apple would just let us manually enter these locations...

love how he went straight to the point

Update: iOS 17.4 beta includes the option to Always require a security delay instead of just unfamiliar locations, effectively working around this flaw.

An additional layer of protection in conjunction to using Stolen Device Protection is to set a 4 digit Screentime passcode, ENABLE Content Restrictions and then DISABLE the following two items: 1) "Allow Account Changes" and 2) "Allow Passcode Changes". This is the method I used before SDP became an option in iOS 17.3, and I intend to carry on using this as a "belt and braces" approach. Can't be too careful!

*FYI I'm running iOS 17.4 Dev Beta 1 and there is a new feature to require security delay "Away from Familiar Locations" OR "Always", so no need to turn off Significant Locations, if that's what you're worried about.*

Yeah it should let you select locations

Great video, thanks! Apple did make this new feature a little over-complicated. It would have been better had they allowed you to specify your own significant location(s), that way you could potentially set just a single significant location (e.g. your home) where the additional protection is overridden.

Another useful video!! just enabled the feature! Thanks again Thio!!

You can add an additional layer of security by turning on screen time and disabling account changes so it’ll be harder for thief’s to sign out of iCloud As you can’t go to settings-> screen time -> then content restrictions at the bottom turn off account changes

very good info, power and home at same time, cool!

Great video - thanks for the update, really useful

Thanks Thio! 💜 Many people commented that there's a fix for this flaw in the iOS 17.4 beta, but the other topics in this video might be just as important.

i loved your og stuff when you just tried to piss people off, but your new stuff is kickass too. thanks for the content, you kickass!

when talking about this future, nobody actualy covered this flaw, thanks, great video, helpfull as always. ur the best

totally awsome and professional. Thank you for this valueable and useful information we should all take a half hour and do the things you suggested in our iphones. Keep up the great work.

Nice! I have just found this feature in my new iPhone and I have noticed this flaw too. I have had the same conclusion as you. High five 🙏

Many thanks for sharing very informative security updates god bless take care

I also have implemented two additional security steps. 1. I set a pin for screen time and disabled passcode changes and account changes. This way even if they know your passcode they still can't change your device passcode or your Apple ID password. 2. I set up an automation in the shortcuts app that automatically locks the phone any time you open critical apps. The automation only applies if the phone is not connected to my home wifi. So for instance, you are sitting at the bar texting your SO and someone walks up grabs the phone out of your hand and runs while it's still logged in. They open the settings app, the phone automatically locks. It's really not all that much extra effort to just use your touch id or face id to quickly log back in. It's basically no different than how some banking apps request a touch id to open the app. I also applied it to my email app as well, because if they get access to your email they can start doing password resets on accounts you have tied to that email. And I have other apps set up that way as well.

I'm surprised the comment section is so civil lol

Did it right away. Thanks for the tip

Thx for the advice which I’ve now done

Great video. Thank you.

This is the best video on RU-vid right now thanks for sharing this information thio Joe 👍👍👍👍👍

Great video thank you! You gained a subscribe for sure

Thanks!

Much appreciated 🤩

Thank you

As someone who lost his 13 mini this way. I'm setting up my new 15 with this video, I've had it bookmarked since you dropped it. LIFE SAVER 🙏

Nice video!

YES! MORE THIOJOE! 🎉🎉 lets gooo! i love thiojoe ❤

You should activate Screen Time to YOURSELF -> and disable passcode and account changes (under Content & Privacy Restrictions). You ofc set a different numerical code here than your ”regular” passcode. After this, the thief now would have to know your passcode AND the different Screen Time code to do anything account or passcode related.. BUT…. This might not be 100% bulletproof, because you CAN reset the Screen Time code via AppleID, but it prevents the process to be ”familiar” and fast..

How does the setting for unlocking with Apple Watch play into this? Should I disable that feature as well?

Thank you ThioJoe, excellent hint and advice!

More than anything, the video confirms why I don't use my Apple account for anything more than the most basic of functions. Thanks anyway Thio; a really informative video as always.

Yay! ThioJoe's upload schedule is fixed!

Good video. The Screen Time pin lock workaround seems more secure with less hassle (not having to wait an hour). The simplest solution that Apple could have implemented would be allowing you to choose a different PIN/Passcode for critical system services or apps.

Another good tip is to use a privacy screen protector to prevent prying eyes on the side

1) What if your phone faceID breaks? Can it still be recovered/transferred to a new phone? 2) On airplane mode on lock screen, what about the bluetooth lost beacon for powered off phones?

Great video, love how the stock image of the thief looks like Linus 😂😂

Thanks for all the information! I just have one question - is it necessary to disable Siri in the “Allow access when locked” section That means the “Hey Siri” phrase won’t work while it’s locked, right?

If you disable significant location does it not use the set home and work addresses in Apple Maps?

This video has proper subtitles ❤

is there anyway to use this without requiring face id?

Thanks for a great tip on IOS 17.3 security. Hopefully 17.3.1 or 17.4 will come out soon with better options.

Thanks for adding actual captions for the Deaf

useful

Does the theft production work on 13promax? I do not see the menu option that show how to get there. I have 17.3 and rebooted

Should this be available on a 12 pro max?......Don't see it as an option in 17.3

I wanna turn this feature but I have a question. That one hour delay. Would the owners of the iPhone also have to wait for that 1hr to change to make changes or is there a way the owner can by pass the one hour delay. I hate to turn on the feature then have to wait an hour when I wanted to make changes.

Do you lock the account settings under Screen Time, Content and Privacy settings, Account changes? It stops access to your Apple ID section in settings.

With an IPhone SE2 I am stuck after enabling this new feature. I cannot access my passwords or make certain changes any longer. I almost always use my numerical codes to enter in as my phone case has a film over the home button that does not allow it to recognize my fingerprint. While I have access to most of the phone, I am stuck in an endless loop of a Touch ID requirement and after removing the phone case to access the home button, it does not recognize my fingerprint! Unfortunately any of the options to fix this requires a Touch ID to verify. This phone does not have Face ID. So far unable to find a fix. Not sure yet if I have a faulty home button fingerprint recognition, or if it is the stolen device protection that is negating the Touch ID. Still looking for a solution. Great video by the way! 😊

The places I visit the most are my university and work which is a hospital are probably the places my phone is most likely to get stolen so this is very helpful

i love everything this dude is doing

I just got a 15 Pro a few days ago and set up a 4 digit PIN because I wanted some security, but to still be able to unlock it quickly, mostly so I can easily change the music while driving. But it's nice to know that if you set a alphanumeric password you don't have to enter it all the time, so this problem wouldn't be as obnoxious as I assumed it would be under the same circumstances.

I would have thought "significant locations" are places where you have unlocked your device (otherwise a thief could hang out in an area with your phone till it got added to the list)

Thank u luv from brooknam

Question, in a familiar location, does it let you use the passcode as fallback for ALL the features, or just for disabling Stolen Device Protection? If it's the latter, you could just restrict access to the Passcode & FaceID settings using Content Restrictions in Screen Time, and set a separate Screen Time passcode to prevent changes. Also you can restrict Account Changes to prevent access to iCloud settings.

Why only on the Iphone and not IPAD??

Thanks for adding Polish

iOS 17.4 Beta fixes this issue. There is another menu in 17.4 to require the delay always rather than only when not at a familiar location.

Thanks bro it was a great talk ! Why don’t disable password change in screen time so when the thief wants to change the password he will be required to enter the screen time password 😮😊

i just updated to iOS 17.4 beta and it adds an option to always require the security delay

Turn on screen time, set a different passcode for screen time, and under Content & Privacy Restrictions, set Passcode Changes and Account Changes to 'Don't Allow'. This way, even if they somehow got your regular screen passcode, they will not be able to make any passcode or account changes without knowing the separate screen time passcode that you set.

You can also add unlocking to face ID by recognizing a code word or phrase, which the user could record in advance using sound recording. It would be nice if they added this

Thanks for the video and changed my settings. What I found interesting is, on lock screen it asks for my face, which is great. So I tried to see what would happen if I didn't point the camera at my face and the password screen comes up. So now the thief with your passcode can still get into your phone.

Hello, I updated my iPhone to the latest version after which I turned on Stolen device protection. And now my Face ID can’t detect my face anymore! I have tried turning SDP off buh it won’t turn off since my Face ID can’t detect my face. Now I don’t know what to do anymore.

Wow new audio track translating feature

Even with Stolen Device Protection enabled and your extra suggestions followed, if my phone is stolen how do I access my Apple ID account without Apple sending a security code to the thieves instead of me? Obviously with a second device logged in it’s ok but if I need to use a friend’s phone? Apple devices are very costly, not everyone has 2?

5:42 I've no phone but ipad. when i scroll around the map i can see other locations. my university has two campuses. both are marked at significant locations. haven't been there for a year. my home apparently is no significant location haha.

User: "I had a major facial injury." Apple device: "New face who dis?"

I have 17.3 and that item Face ID and passcode between Siri and emergency SOS is not there! Why don’t I have that option?

Even if Apple let you customize Familiar Locations whats stopping someone from creating a backup of your device, dumping all the locations, and going to that location later on?

Is this another feature that will prevent someone from using phone if it's not removed when you buy the phone from someone?

I’m confused. In the video you say that turning off Find My asks for your passcode. In my case which I’ve tested, it requires my Apple ID password.

Messing around with the device protection feature, I had to wait an hour even at home to make changes. Strange that my home wasn't considered a "familiar location"? So, hoping they are pretty strict with familiar locations

I thought you would need Face ID to turn on the Significant Locations anyway. Perhaps that's something you need to try, when it's off and the Stolen Device Protection is on, can you even turn on the Significant Locations option with a passcode only.

My Face ID module is broken, is it even worth upgrading to iOS 17.3 for this feature?

My GOD why make this so difficult..????

There's a pretty easy work around to that. Sensitive settings like find my phone, face unlock and apple account settings should simply have different pin and not lock screen code. I never understood why they didn't apply that tbh.

Where is the link?

Would it make a difference if you had one p/w to unlock the phone plus your heavy duty pass code to unlock important things? Thief would need two pass codes but you would be providing only one.

Screen time is a good way to ensure additional protection, you’ll rearly ever need to enter your screen time password, and a thief will need it to change your account settings and your passwords … it’s quite easy to set up too… screen time - set screen time passcode - content and privacy restrictions - account changes and passcode changes - select don’t allow … I kept this on even after enabling stolen device protection cause I’ll be keeping significant locations on… Keep in my mind, one time you’ll need to use your screen time passcode is when you yourself need make changes your account or passwords - eg. Face ID is hidden from menu so you’ll need to disable screen time to access it (well just allow changes - then change back to don’t allow after)

EVERY TIME I backup my phone, plug it in to charge via USB or even when downloading photos I MUST type in my passcode. It is needed a lot more than you suggest.

Hey, are use screen time and I have clocked off passcode and Face ID, and make another pin code to screen time

How to choose original audio track in mobile web version?

when is the movie about ios 17.4 because they changed this feature and now it is possible to disable known locations?

as someone with touch id a long code unfortunatly isnt an option since touchID barely works for me

It used to be easier to lock down apple account with a screen time passcode. However with recent changes they have made it harder to do that. It can still be done with screen time passcode but you have to remove your passcode which makes no sense.

Apple needs to remove the ability to reset your apple account password without entering the old one first. This is the biggest security flaw of everything..

Don't let others use your cell phone. Thumbs up, TJ--great information here. Here is a problem. The face recognition on my phone is bad. Better than half the time I need the passcode to unlock. I thought that is how things were with iPhones. I might lock myself out of my phone if I rely only on face recognition.

my phone still ask for an apple id password even i set up the passcode? idk how but maybe if you changed your apple id password using another device prior to turning on the passcode, then the phone ask for an apple id password not the phone passcode, idk i bought a locked icloud phone and it activated but the phone has a previous owner's icloud information and kept asking for password

sorry how do you turn out your history as you said

I appreciate videos that show iOS devices security flaws. I like to think Apple employees watch them too cus every updates to my iphones security system, make me feel 10x more at ease when I misplace my iphone. Thanks

One of my familiar locations is the gym…. A place where people might see you enter your passcode from over your shoulder, and people sometimes have their phones unlocked playing videos while they work out. I wish I could edit this location out.

How does the phone passcode unlock the icloud settings which require (at lease in my case) the apple account password; not the phone's passcode.

Turning off significant locations also saves a bit of battery!

From my experience, I believe familiar locations are the locations your apple maps thinks you might drive to when you get on your car. I get my house, work, and the gym

Any downsides to turning off significant locations? There’s a warning message that it’ll affect certain apps, but the message doesn’t tell you how it’ll affect those apps (or really, why you want it on for those apps).

Seems odd that Stolen Device Protection (SDP) requires Face ID to access certain features, but iOS still forces me to enter my passcode on a regular basis to use Face ID. Makes no sense if Face ID is the more secure authentication. I already have Significant Locations disabled to save battery.