PRIVACY GUIDE: iPHONE
INTRODUCTION
As an activist or independent journalist, protecting your privacy and security is extremely important. Your iPhone contains sensitive information about your work, sources, and contacts that could put you or others at risk if it fell into the wrong hands. iPhones have robust security, but there are still steps you should take to strengthen it. This guide provides tips and advice for how to keep your information secure on an iPhone.
USE A PASSCODE
Set a strong alphanumeric passcode for your iPhone.
Go to Settings > Touch ID & Passcode and turn on Passcode.
Don't use simple passcodes like "1111" or "1234".
Use at least 6 characters and a mix of letters, numbers and symbols.
ENABLE ENCRYPTION
Encrypting your iPhone scrambles all its data so it is unreadable without your passcode.
Go to Settings > Touch ID & Passcode and turn on Data Protection.
This means if your iPhone is lost or stolen, no one can access your files.
Suggested Reading: https://www.hexnode.com/blogs/iphone-encryption-everything-you-need-to-know/
UPDATE SOFTWARE
Always keep your iPhone's iOS updated. Apple issues frequent software updates to fix security vulnerabilities.
Go to Settings > General > Software Update to update to the latest iOS version.
Turn on automatic updates if possible.
USE SECURE APPS
Be selective about apps you install. Only download from the official App Store.
Use encrypted messaging apps like Signal for sensitive communications.
Verify app permissions and only enable what is absolutely needed.
Delete unused apps.
Suggested Apps: Signal | Threema | Wire | Session
Suggested Reading: https://www.securemessagingapps.com/
STRONG PASSWORDS
Don't use simple passwords like "1234" or "password". Use longer passwords with a mix of letters, numbers and symbols.
Consider using a password manager app to generate and store strong, unique passwords for each of your accounts.
Enable two-factor authentication where possible for an extra layer of security on important accounts.
Suggested Apps: Bitwarden | Proton Pass
AVOID PUBLIC WIFI
Don't perform sensitive online activities like banking or shopping on public WiFi.
The traffic can be intercepted. Use a VPN app to encrypt your connection when on public networks.
USE A VPN
A virtual private network (VPN) encrypts all traffic leaving your device.
This hides your IP address and online activities from surveillance.
Do your research and only use trustworthy paid VPNs, not free ones.
Suggested Apps: Proton VPN
ACTIVATE LOCK FEATURES
Make use of your iPhone locking capabilities. Turn on Auto-Lock to lock your screen after 1-2 minutes of inactivity.
Enable Find My iPhone via iCloud to remotely wipe or lock a lost device.
CREATE ENCRYPTED BACKUPS
Back up your iPhone data regularly either using iTunes or iCloud.
Make sure backups are encrypted so your information is protected.
Go to Settings > [Your name] > iCloud > iCloud Backup and turn on Encrypted Backup.
USE TWO-FACTOR AUTHENTICATION
Enable two-factor authentication (2FA) on important accounts like email, banking, social media, and work apps.
2FA requires both your password and a second step like a code sent to your device.
Suggested Apps: Aegis Authenticator
BEWARE PHISHING ATTACKS AND MALWARE
Be cautious of emails, texts or calls requesting personal information or linking to suspicious websites.
These phishing attempts seek to gain access to your accounts and data.
Fortunately for Apple fans, iPhone viruses are extremely rare, but not unheard of.
While generally secure, one of the ways iPhones may have become vulnerable to viruses is when they are 'jailbroken'.
Be vigilant about not downloading apps from third-party sources outside the App Store.
Also beware of phishing links sent via SMS or email that try to trick you into compromising your device.
Suggested Apps: Bitdefender | Malwarebytes
Following these tips will help you use your iPhone more securely. But ultimately, remember it is just a device.
Practicing good operational security in how you communicate and share information is just as important as technical smartphone security.
