<aside> 📌

Basic settings

• Employ a strong, unique passcode that is not easy for someone to see over your shoulder (expand for more tips)
• Auto-Lock after 30 seconds (Display & Brightness)
• Location Services: ON (Privacy & Security)
• Privacy & Security>Location Services>Share My Location
  • Find My iPhone: ON
  • Find My network: ON
  • Send Last Location: ON
  • Share My Location ON
• Enable Face ID (Face ID & Passcode)
  • Use Face ID for all 4? presented options
  • Require Attention for Face ID: ON
  • Attention Aware Features: ON
  • Stolen Device Protection: ON
  • Require Passcode Immediately
  • “Allow Access When Locked” settings:
    • Turn OFF: Notification Center, Control Center, Siri, Accessories
    • Maybe keep ON (for lost phone situations): Return missed calls
      • this requires your Phone app not being locked by Face ID
  • Erase Data after 10 failed passcode attempts
• Lock any sensitive apps with Face ID (See suggested apps section)
• Enable Stolen Device Protection (Privacy & Security) - select preferred mode
  • “Always” require 1 hour delay & Face ID (no passcode fallback) to perform the following actions:
  • 1 hour delay required when “Away from Familiar Locations”
• Convert physical SIM to eSIM or enable SIM protection through mobile provider
  • Don’t put PIN on an eSIM, or cellular data will be disabled when phone is turned off and back on and the PIN isn’t known. You need cellular data ON to help track the phone’s location.

</aside>

<aside> 🧠

Use Screen Time settings to prevent changes to account

Navigate to Screen Time>Content & Privacy Restrictions

Content & Privacy Restrictions: ON

• iTunes & App Store Purchases: Always Require Password
• Locations Services: Don’t Allow Changes
• Share My Location: Don’t Allow (changes)
• Passcode & Face ID: Don’t Allow
  • this will hide the Face ID & Passcode section entirely in Settings
• Accounts: Don’t Allow
  • blocks anyone from opening the Apple ID section in Settings
• Cellular Data: Don’t Allow (less useful)
  • this doesn’t prevent switching CD on/off in Settings, but it does disable the CD switch in Control Center. </aside>

<aside> 💡

Commit key passwords to memory (Apple ID, master password for password manager, Google, etc.)

</aside>

<aside> 💡

Suggested apps to lock with Face ID

Ramifications of locking apps

</aside>

<aside> ⚠️

Careful! If a deceased loved one has SDP in “Always” mode on their phone, there is no way to bypass the Face ID requirement

• Pro tip: Add alternate appearance of trusted friend or family member as a backup PRIOR to anything happening.
• If they are signed into the same Apple ID on another device (such as their home computer), you may be able to access their account that way.
• Less reliable (and morbid): you can turn off “Require Attention for Face ID” without Face ID, if you somehow have access to their (dead) face. </aside>

<aside> ⚠️

Can be accessed without Face ID on an unlocked phone

• Can see your personal info in Contacts app
  • Solution: delete Contacts app and lock Phone app with Face ID
  • You can still see contacts via the Phone app
• Can see where you are in Find My (but this goes both ways)
• Can see where your home is in Find My if other devices are always at home </aside>

<aside> 📌

PUT PHONE IN LOST MODE ASAP

• Will require both passcode & Face ID to unlock phone
• Apple ID also required to sign back into iCloud </aside>

<aside> ⚠️

While phone is offline…

• Can’t remotely erase phone or enter lost mode until online again </aside>

<aside> ℹ️

Advanced Data Protection (optional)

• end to end encryption of data. mostly to protect against law enforcement or copying of phone data
• Requires recovery contact or recovery key.
• Apple will not be able to help you decrypt your data if you lose your recovery method

<aside> ⚠️

Can’t enable this if you have older devices signed into iCloud

</aside>

</aside>

More reading