Lock It Down: iPhone Security That Works

The 60-Second Version

If you remember only a handful of things about keeping your iPhone safe, make it these.

• Use a passcode of six digits or more, and never your birthday or address.
• Set up Face ID so unlocking is quick and your passcode stays private.
• Turn on Stolen Device Protection so your passcode alone is not enough for a thief.
• Never share your passcode or a texted code with anyone who contacts you.
• No real company, and no one claiming to be Apple, will ever call and ask for a code.

Choosing a Strong Passcode

Your passcode is the foundation everything else rests on. A good one takes seconds to type and keeps your whole phone locked to everyone but you.

The best passcode is at least six digits long, and longer is better still. Avoid anything a stranger could guess or find: your birthday, your anniversary, your house number, or a run like 1234. A random six digits you can remember but no one could guess is exactly right.

• Open Settings (the grey gear icon).
• Tap Face ID & Passcode and enter your current passcode if asked.
• Tap Change Passcode, or Turn Passcode On if you do not have one yet.
• Tap Passcode Options to choose a longer numeric code, then enter your new one.

Keeping Your Passcode Private

The strongest passcode in the world only helps if it stays yours alone. Here is how to keep it that way in everyday life.

Most iPhone thefts that go badly start the same way: a thief watches someone type their passcode, then grabs the phone. With that one code they could change settings and lock you out. The good news is that Face ID means you rarely type your passcode in public at all, and the next chapters add a safety net even if someone did learn it.

• Shield the screen with your hand when you type your passcode in public.
• Do not write your passcode on a sticker on the phone or in your wallet.
• Never tell your passcode to someone who called or messaged you.
• If a stranger ever watched you type it, change it afterward using the steps on the last page.

Setting Up Face ID

Face ID lets your iPhone unlock the moment it sees your face. It is fast, private, and it keeps your passcode out of view.

Instead of typing your passcode, you simply look at the phone and it unlocks. The same glance can fill in passwords, approve purchases, and open your banking app. Your face is never sent to Apple or stored anywhere but on your own phone, in a part no app can reach.

• Open Settings and tap Face ID & Passcode, entering your passcode if asked.
• Tap Set Up Face ID.
• Hold the phone in front of your face and slowly move your head in a circle.
• Do the circle a second time when asked, and you are done.

Adding an Alternate Appearance

Face ID can learn a second look for you, which helps if your appearance changes through the day. It is optional, but many folks find it handy.

If Face ID sometimes fails to know you, an alternate appearance gives it a second set to match against. This is useful if you wear a hat, sometimes have your glasses off, or your look changes with the weather. It is still only you, taught to the phone a second time.

• Open Settings and tap Face ID & Passcode.
• Tap Set Up an Alternate Appearance.
• Move your head slowly in a circle, twice, just as before.
• That look is now saved alongside your first one.

Stolen Device Protection: Your Safety Net

This is the setting that guards you even if a thief somehow learned your passcode. If you turn on only one thing from this book, make it this.

Normally your passcode can change almost any setting. With Stolen Device Protection on, the most sensitive actions, such as changing your Apple Account password or turning off Find My, also require Face ID, and some add an hour's wait when you are away from home. A thief with just your passcode is stopped cold.

• Open Settings and tap Face ID & Passcode, entering your passcode.
• Scroll to Stolen Device Protection and tap it.
• Turn it on. You may be asked to make sure Find My and two-factor are set up first.

What Shows When Your Phone Is Locked

Even locked, your phone can show quite a lot on its screen. A few settings decide how much a passer-by can see or do without unlocking.

You can control what is reachable while the phone is locked, from message previews to the Control Center. The goal is simple: keep the convenient things you want, and hide anything you would not want a stranger reading over your shoulder.

• Open Settings and tap Face ID & Passcode, entering your passcode.
• Scroll to Allow Access When Locked.
• Turn off anything you would rather keep private, such as message previews or your wallet.
• Under Notifications, you can set previews to show only after the phone is unlocked.

Locking Your Phone and Auto-Lock

A phone that locks itself quickly is a phone a thief cannot use. This is one of the easiest protections to set and forget.

Press the side button once to lock your iPhone any time you set it down or hand it back. It is a good habit that costs you nothing and keeps the screen private the moment you are done.

• Open Settings and tap Display & Brightness.
• Tap Auto-Lock.
• Choose a short time, such as 30 seconds or 1 minute.
• Now the phone locks itself soon after you stop using it.

Two-Factor: The Lock on Your Apple Account

Your Apple Account ties your whole phone together, so it deserves the strongest lock. Two-factor is that lock, and it is likely already on.

Two-factor means that signing in to your Apple Account takes two things: your password, and a short code sent to a device you trust. Even if a crook learned your password, they still could not get in without the code, which only reaches your own devices. It is a strong protection working quietly on your side.

• Open Settings and tap your name at the top.
• Tap Sign-In & Security.
• Look for Two-Factor Authentication and make sure it says On.
• Check that your trusted phone number is one you still use.

Recovery Key and Recovery Contact

These two features make sure you can always get back into your account, even on a bad day. Think of them as spare keys kept with people you trust.

A Recovery Contact is a trusted family member or friend who can help you back into your account if you are ever locked out. They cannot see your information, they can only give you a code to prove you are you. A grown child or your spouse is a natural choice.

• Open Settings and tap your name, then Sign-In & Security.
• Tap Account Recovery, then Add Recovery Contact.
• Choose someone from your contacts and follow the prompts.

Safety Check: Who Can See What

Over the years you may have shared your location or given apps permissions you have forgotten. Safety Check lets you review and reset all of it in one place.

It gathers up everyone you share things with, such as your location, and every app that has access to your information, and lets you see the whole picture at once. You can stop sharing with anyone, or, in an urgent situation, reset everything at a stroke.

• Open Settings and tap Privacy & Security.
• Scroll down and tap Safety Check.
• Choose Manage Sharing & Access to review things one by one.
• Follow the prompts to stop any sharing you no longer want.

What a Thief Actually Can and Cannot Do

It helps to know the truth here, because the truth is reassuring. A well-set-up iPhone is a poor prize for a thief.

A thief's best hope is to trick you, not the phone. They may text you a fake message saying your lost phone was found, hoping you will tap a link and hand over your Apple Account password. Never do this. Apple and Find My never work through a link in a surprise text.

• They cannot unlock a phone protected by Face ID and a strong passcode.
• They cannot get past your Apple Account, which is locked to your face and code.
• With Stolen Device Protection on, they cannot change your account or turn off Find My.
• They cannot sell or reuse the phone in any normal way while it is tied to your account.

Find My: A Security Tool, Not Just a Finder

Find My does more than help you locate a misplaced phone. It is also the feature that makes a stolen iPhone nearly worthless to a thief.

When Find My is on, your iPhone is locked to your Apple Account. Even if it is wiped clean, it will ask for your account before it can be used again, which is why a thief cannot simply resell it. You are the only one who can free the phone, and that is exactly the point.

• Open Settings and tap your name at the top.
• Tap Find My, then Find My iPhone.
• Make sure Find My iPhone is turned on.
• Turn on Find My network and Send Last Location too, for extra safety.

If Your Phone Goes Missing

Losing your phone is a fright, but there is a calm set of steps that puts you back in control quickly. Take a breath and work through them in order.

There is an option to Erase This Device, which wipes it clean. Do this only when you are sure the phone is gone for good, because once erased it is harder to track. Marking it as lost is usually the better first step, and I can walk you through it on the phone.

• On another Apple device, or at iCloud.com, open Find My and sign in.
• See the phone on the map. If it is just at home, breathe easy.
• Tap Play Sound to make it chime if it is nearby.
• If it is truly lost, choose Mark As Lost to lock it and show a message with a contact number.

Keeping Your Phone Updated

Software updates are not just about new features. Most of what they do is quietly close security holes, and keeping current is one of the simplest protections there is.

When a weakness is found, Apple sends out a fix to every iPhone. If your phone installs updates on its own, you get that protection without lifting a finger. A phone left years out of date is far easier to trouble, so letting it keep itself current is time well saved.

• Open Settings and tap General.
• Tap Software Update, then Automatic Updates.
• Turn on Download and Install so updates arrive on their own.
• Turn on Security Responses so quick safety fixes install right away.

Reviewing What Your Apps Can See

Over time, apps ask to use your location, your camera, your microphone, and your contacts. It is worth a look now and then to make sure only the ones that truly need these have them.

A map app needs your location, and a video-call app needs the camera and microphone. But a simple game or a flashlight does not need your contacts or your whereabouts. If an app wants more than its job requires, it is fine to say no. Nothing important breaks, and your information stays yours.

• Open Settings and tap Privacy & Security.
• Tap a category such as Location Services, Microphone, or Contacts.
• See the list of apps that have asked, and what each is allowed.
• Turn off any that surprise you. You can always turn one back on later.

Habits That Keep You Safe

You do not need to be an expert to stay safe. A few plain habits handle nearly everything, and your phone does the hard part for you.

If a message, a caller, or a pop-up ever leaves you uneasy about your phone or an account, that feeling is worth trusting. You are never bothering anyone by asking first. It is always cheaper and calmer to check before than to fix after.

• Let Face ID unlock the phone so you rarely type your passcode in public.
• Keep Stolen Device Protection and Find My both switched on.
• Never share your passcode or a texted code with anyone who contacts you.
• For anything important, go to the real website or app yourself, not through a link.
• Let your iPhone update itself so it always has the latest safety fixes.

Spotting a Fake Security Alert

Most scams do not break into your phone. They talk you into opening the door yourself. Once you know the pattern, you can spot every one of them.

Close the message without tapping anything, and do not call the number it gives. Your iPhone does not show virus warnings while you browse, so any that pops up is fake. If you are worried about a real account, reach the company yourself using a number from your own records, never one a message handed you.

• A pop-up, text, call, or email warns of a virus, a hack, or a locked account.
• It looks official and uses words like Apple, Microsoft, or your bank.
• It creates a rush and gives you a number to call or a link to tap.
• The goal is to get your password, a code, or control of your screen.

When Something Feels Wrong

Sometimes you cannot say exactly why, but a call or a message just feels off. That instinct is worth listening to every single time.

Scammers work by rushing you and stirring up worry, because a calm person spots the trick. If a caller pressures you, threatens you, or tells you not to talk to anyone, that alone is proof it is a scam. Real companies and real family never mind if you slow down, hang up, and check.

• Hang up on any surprise call that asks for a code, a password, or a payment.
• Do not tap links in texts or emails you did not expect.
• Never let someone who contacted you take control of your screen.
• Call a trusted family member, or call me, before you act on anything urgent.

What's in the 27-page PDF

• Your passcode and Face ID, set up the right way (pages 3-6)
• Stolen Device Protection and what shows on your Lock Screen (pages 7-10)
• Keeping your Apple Account safe, and Safety Check (pages 11-14)
• What a thief really can and cannot do, and Find My (pages 15-18)
• Spotting fake security alerts and staying calm (pages 19-20)
• A cheat sheet and a plain-English word list at the back (pages 21-22)

Why I wrote this

I write these as printable handouts because a guide you can keep in a drawer beats a web page you have to find again. No jargon, no judgment, no rushing. If you'd rather have someone sit beside you and go through it together, that's a flat $99 first visit with the 30-day follow-up included — serving Portage County from Atwater, Ohio. — Bill