iPhones and iPads are, out of the box, quite robust and secure platforms. But with a few tweaks you can harden that security dramatically without adding too much burden to your day-to-day usage of the device.
Good iOS security starts with having a really strong passcode. If this is something that's easily guessable then everything else you do is pretty much pointless.
No matter whether you use Face ID or Touch ID to access your iPhone, you still need a passcode, and the longer the passcode you can use -- and remember -- the better.
Go to Settings > Face ID & Passcode (or Touch ID & Passcode on older iPhones), enter your existing passcode, and then tap on Passcode Options to get a set of options. Choose between Custom Alphanumeric Code (the most secure) or Custom Numeric Code (second best option), or 4-Digit Numeric Code (I don't recommend this last option).
After you install iOS 13 you might find a whole swathe of apps such as Facebook asking you for permission to transmit data over Bluetooth. You can either allow or deny access when the prompts are displayed, or you can head over to Settings > Privacy > Bluetooth and make the changes there.
Note that this doesn't affect audio streaming to headphones and speakers.
iOS has built-in brute-force protection to prevent an unauthorized user from trying to guess your passcode.
Go to Settings > Face ID & Passcode (or Touch ID & Passcode on older iPhones), enter your existing passcode, and scroll down to Erase Data.
After 10 attempts (toward the end there will be a time lockout to slow down the entry process), the encryption key will be deleted and your data wiped.
iOS 13 has the ability to keep itself updated automatically, which is a great way to make sure that your iPhone is fully patched.
This should be set up automatically, but you can check it over at Settings > General > Software Update and make sure Automatic Updates is enabled.
The shorter you set the lock screen timeout setting (there are options ranging from 30 seconds to never), the faster your iPhone or iPad display will require authentication to access it.
You can change the auto-lock time by going to Settings > Display & Brightness > Auto-Lock.
iOS 13 now comes with both a password autofill feature that can use information stored in the iCloud Keychain along with the ability to connect to third-party password apps such as LastPass, Dashlane, and 1Password.
Also: 5 reasons why you need a password manager
You can find this feature in Settings > Passwords & Accounts > AutoFill Passwords.
If you use the iCloud Keychain to store web passwords, you can now use this to check for password reuse (which is bad, so don't do it!).
Go to Settings > Passwords & Accounts > Website & App Passwords and authenticate with either Face ID/Touch ID or your passcode.
You will see a grey triangle with an exclamation mark next to any entry that is reused. To change the password, tap Change Password on Website.
Under iOS 12, it was possible to track iPhone and iPad users by the public Wi-Fi points the device was connecting to silently as the owner went about their business. This ability has now been blocked under iOS 13 so you can wander about without the fear of being tracked.
Another thing you might have noticed after installing iOS 13 is that you get notifications informing you that apps are using your locations data, and giving you the option of allowing this to continue or blocking it.
Don't worry, you can change your mind by going to Settings > Privacy > Location Services, and changing permissions for your apps.
iOS 13 has a cool new app called Find My which you can use to locate your friends and family, share your location, or find a missing device.
This app has two cool features, one is Enable Offline Finding that helps you find lost devices that aren't connected to Wi-Fi or Bluetooth. The other is Send Last Location, which sends the device's location to Apple when the battery is low.
Do you want the convenience of Face ID or Touch ID, or do you prefer the additional protection that having to enter your passcode offers? iOS 13 allows you to switch Face ID/Touch ID on and off for:
Go to Settings > Face ID & Passcode (or Touch ID & Passcode on older iPhones), and enter your existing passcode to take control of this.
Control how much -- or how little -- you want to be accessible on a locked device. iOS 12 gives control over the following:
The bottom line is that the more you lock down, the more secure your device and data will be. The USB Accessories feature is especially useful, because it will prevent the Lightning port being used to connect to any accessory if your iPhone or iPad has been locked for more than an hour.
Go to Settings > Face ID & Passcode (or Touch ID & Passcode on older iPhones), and enter your existing passcode to take control of this.
Here's a simple trick to know that allows you to disable Face ID or Touch ID and force the use of the passcode.
To do this press the power button five times (just be sure to cancel the SOS Emergency calling feature if you have this activated).
One of the best ways to protect your data is to set up and use two-factor authentication. This means that, even if an attacker has your iCloud username and password, Apple will send an authentication code of a device you've chosen, which should block most attacks.
Go to Settings > and tap your name at the top of the screen, then go to Password & Security, then choose Two-Factor Authentication.
Also: Protect yourself: How to choose the right two-factor authenticator app
While setting up two-factor authentication you can also set up a Recovery Key.
Once set, without this key, or another device signed in with your Apple ID, you will not be able to reset your password.
This is a new feature in iOS 13.2 that allows you to erase your Siri and dictation data from Apple's servers.
First download and install iOS 13.2 on your iPhone or iPad. Then fire up the Settings app and go to Siri & Search > Siri & Dictation History. From there tap the big, ominous-looking red button marked Delete Siri & Dictation History. Then you confirm that you want to carry out this action by tapping Delete Siri & Dictation History on the popup. You should finally get confirmation that the request has been received by Apple.
Another new feature in iOS 13.2 that helps you prevent data leakage.
Go to Settings > Privacy > Analytics & Improvements and look for Improve Siri & Dictation and toggle the switch to off.
Done!
Notifications displayed on the lock screen can leak sensitive information.
To stop this go to Settings > Notifications > Show Previews and change the setting to When Unlocked or Never.
Under iOS 13, the Safari browser now has the ability to control access to features such as the camera, the microphone, and current location on a per-site basis.
Go to Settings > Safari and look for the toggles under Settings For Websites.
This is a great way to get rid of nuisance and spam callers. To enable this feature, go to Settings > Phone > and toggle to Silence Unknown Callers.
See also: