Earlier this year, Joanna Stern and Nicole Nguyen did some excellent reporting about how easy it is for someone to own your Apple ID if they steal your iPhone.
Apple has responded with a new feature that has popped up in today’s beta of iOS 17.3. Michael Potuck has details at 9to5Mac:
Apple has thoughtfully created a two-tier system of how Stolen Device Protection works that offers a balance of user-friendliness while enhancing security.
For example, with the feature turned on, actions like using passwords or passkeys, applying for an Apple Card, turning off Lost Mode, erasing an iPhone, and using payment methods saved with an iPhone will require biometric authentication – no passcode fallback when away from familiar locations.
Stern and Nguyen have a list that provides more detail in their article about the new feature.
Biometrics are required to:
- Access iCloud Keychain passwords
- Apply for a new Apple Card
- Erase all content and settings
- Turn off Lost Mode
- Send Apple Cash to a bank account
- Use your iPhone to set up a new device
- Use payment methods saved in Safari
Biometrics + an hour wait are required to:
- Change your Apple ID password
- Enable recovery key
- Change trusted phone number or contact
- Add Face ID or Touch ID
- Remove Face ID or Touch ID
- Disable Find My
- Turn off Stolen Device Protection
This holiday season, make sure your loved ones have Touch ID or Face ID enabled on their devices.