Apple iOS Security
Iphone, Ipad, and Ipod Security
Set a Passcode and Auto-Lock.
To configure:
- From your home menu, choose Settings.
- Select General.
- Select Passcode Lock.
- Enter a four-digit passcode.
- Enter the passcode again to verify it.
- Go back to the Passcode Lock menu and choose Require Passcode.
- Set the preferred idle time between passcode lock inputs. (Shorter times are more secure.)
Note: After enabling this setting, the iOS device will always require a passcode to unlock the screen or to display the passcode lock settings. To set a more complex password, turn off Simple Passcode within the Passcode Lock menu (highly recommended).
Set up the Locator application.
In the event that your phone is lost or stolen, having installed and prepared an emergency locator application can help retrieve your phone.
The iOS5 includes a program called iCloud, which lets you remotely locate, access, and erase your Apple device. There are also several freely available alternatives in the Apple app-store.
To enable iCloud, go to Settings,then iCloud. Then, click to enable the "Find my iPhone" service.
Enable ActiveSync with your Tufts email address.
ActiveSync not only lets you check your email securely, it provides additional security options that you may configure via Tufts Exchange Online Web Access (OWA).
Install updates regularly.
- Plug your iOS device to your computer via the Apple USB cable.
- Open iTunes.
- Click on your iOS device listed on the left-hand panel.
- Click on the Summary panel.
- Select Update and follow the on-screen instructions.
Note: Before updating your iOS device, make sure to backup all of its data. While connected to iTunes, right-click or CTRL+click on the iOS device from the left-hand panel and select the Backup option.
Check an applications reputation before installing or using a service and uninstall applications you no longer use.
Check an applications reputation using app-store reputation mechanisms prior to installing them. It is good practice to install applications only from the Android Market, but if you choose to use other sources of applications, make sure you fully trust the source (e.g., Amazon).
Jailbreaking lets every app access your personal information
Jailbreaking an iPhone, iPad, or iPod allows you greater control of your device, but also allows an application to make arbitrary changes to your phone, and thus more susceptible to compromise.
Securely configure Bluetooth and Wi-Fi.
For Bluetooth, do the following:
- From the home menu, choose Settings.
- Select General.
- Select Bluetooth.
- Toggle the switch to OFF when not in use.
For Wi-Fi, do the following:
- From the home menu, choose Settings.
- Select Wi-Fi.
- Toggle the switch OFF when not in use.
- If Wi-Fi is on, scroll to the bottom and toggle Ask to Join Networks to ON.
Note:Â Remember to disable both of these wireless services when not in use. Avoid connecting to unknown networks or devices, especially in public areas such as cafes, parks, the street, etc.
Enable encryption.
Setting a passcode will automatically enable Data Protection (i.e. encryption) on the third- and fourth-generation iPod Touch and iPhone. Please note that this feature will only encrypt Mail by default. Locally stored data in different applications may or may not be encrypted, depending on your device's configuration.
To verify that Data Protection is enabled, do the following:
- From the home menu, choose Settings.
- Select General.
- Select Passcode Lock.
- Enter your password when prompted.
- Scroll down and look for Data Protection is enabled at the bottom of the panel.
- If you do not see Data Protection is enabled, you will need to set a passcode first. (See Set a Passcode, above.)
Safari Security Settings
Use Safari browser security and privacy settings that will make your iOS device more secure.
Some of these settings may affect your Internet usability and are less convenient than the less-secure options, so assess your secure requirements and implement accordingly.Â
From the Home screen choose Settings > Safari and adjust your settings:
- Disable Anti-phishing - Turn on Fraud Warning.* Enable Private Browsing - Turn on Private Browsing.** Private Browsing in iOS 5 protects private information and blocks some websites from tracking your behavior. Safari doesn't remember the pages you visit, your search history, or your AutoFill information. While Private Browsing is enabled, the Safari bars appear black or dark instead of blue or gray.To set whether or not Safari accepts cookies:
- Tap Accept Cookies and choose Never, From visited, or Always.Â
Note that some pages may not work unless you accept cookies.* To enable or disable JavaScript, turn JavaScript on or off. - Enable the "Block Pop-ups" feature to prevent websites from opening new windows.Â
Removing or clearing stored Safari content* To clear your history from Safari, tap Settings > Safari > Clear History.
- To clear all cookies from Safari, tap Settings > Safari > Clear Cookies and Data.
- iOS 5: To clear other stored information from Safari, tap Advanced > Website Data > Remove All Website Data.
Information on the Tufts IT Knowledgebase is intended for IT Professionals at Tufts.
If you have a question about a Tufts IT service or computer/account support, please contact your IT support group.