4 ms·
I'm still on iOS 10. If you get my PIN code (say you're a friend, you find it somehow, repair shop - work at one and need the PIN, etc.) then you can't do a who
by penagwin 9y ago
I'm still on iOS 10. If you get my PIN code (say you're a friend, you find it somehow, repair shop - work at one and need the PIN, etc.) then you can't do a whole lot. You still need my password or thumbprint to buy apps or change passwords.
In iOS 11 it changes, now you can for example access all passwords in the keystore. So you know my 4 digit pin for my phone, not to mention my Google password, Apple iCloud password, etc. Those should not be accessible with just the access code.
- Razengan 9y agoiOS has had 6+ digit codes for a while. You shouldn’t be using just 4. The way I go is have a long 10-14 digit code, and Face ID/Touch ID saves me the trouble of having to key it in all the time.
- mikeokner 9y agoYou can still set an arbitrary-length passcode. I think they phased out 4 as too weak, so now 6 is the default, but you can go longer and it'll just show you a text box instead of 6 placeholders.
- eeeeeeeeeeeee 9y agoYou can enable the setting in 'Settings > Face ID & Passcode' to "Erase phone after 10 failed passcode attempts."
- jackjeff 9y agoI have always used an alphanumeric password instead of a PIN. Since Touch ID my password is really long and complicated. I can’t remember it. I have a matrix of hex numbers in the phone case to be used as memento to help recreate the password in case of reboot. Actually two. So I can throw one away and escape RIPA key disclosure law. The back of the matrix explains you need two, and if one is missing then there is no way to retrieve the password.
- lorenzhs 9y agoIf I have your PIN code, I can upgrade your device to iOS 11 and you haven't gained anything
- bryanbuckley 9y agoYou don't need the password for an OS upgrade?!
- lorenzhs 9y agoYou need the device password (aka PIN code), not the iCloud password
- eeeeeeeeeeeee 9y agoWhich makes sense, because you can still run an iPhone without ever logging in to iCloud. It's extremely limiting, but it does work.
- tqkxzugoaupvwqr 9y agoMaybe I misremember, but after an iOS upgrade you have to sign into your Apple account again (at least I got asked every time). So knowing the passcode and upgrading from iOS 10 to 11 could mean the owner’s Apple account cannot be hijacked because the owner is not signed into the Apple account.
- lorenzhs 9y agoFrom the article: "What if the iPhone in question runs an earlier version of iOS that does not allow removing backup passwords? I say you’re lucky because you can simply update that device to iOS 11 and then reset that password. We tried this strategy multiple times, and not once did we have an issue."
- yborg 9y agoWait what? So if I have a device PIN I can reset an iCloud password from an iOS device without EVER entering the iCloud password?
- anthmcc 9y agowonder if it's cause they made the lousy choice to get rid of fingerprint on the X. My apple products are great, but I'm concerned that I'm not going to be able to replace them with the same quality.
- victor106 9y ago“In iOS 11 it changes, now you can for example access all passwords in the keystore” You can do that in iOS 10 as well. Apple made your passcode is equivalent to your root password on a Mac. I think they were trying to make it easy for less tech savvy users to use the device. I agree that there has to some mechanism to change what kind of password you want to apply to access certain functionality on your phone
- nindalf 9y ago> make it easy for less tech savvy users Does a prompt for TouchID/FaceID affect usability?