How can I secure my iCloud password that can't be changed with iphone passcode?

The other day a robber with a gun in front of my house stop me when I was exercising and ask me to give him my phone then ask me my passcode, I have to give him my passcode then he go. Then I get my house as fast as I can to block and erase the phone on iCloud. But to my surprise he change my iCloud Password, but I recover the password fast and then put the phone to erase, looks like the phone started the proccess to delete the phone but then I get another email that said the iCloud was disable.


Then I check with my other iPhone how can they change my iCloud password with my Passcode and to my surprise is extreme easy to do. Just the go to Settings > Apple Id > Close Session .. then forgot password and they can put the passcode and change the iCloud password.


How can I secure my iCloud password that is not so easy to change if someone else get my iphone passcode?


iPhone 7

Posted on Jul 20, 2020 4:00 PM

Reply

Similar questions

5 replies

Jul 22, 2020 11:08 AM in response to donv_the_ghost

I just found a way other person can't change your iCloud password with just your passcode.


1- Under setting > iCloud > Password and security > Security key (Enable this option)

2- Generate a new Security key (very long password, that can't loss it)

3- Disable my passcode and re enable it, so it remove the autorization to change my iCloud password with the passcode.

4- The iOS will try to ask you to put your iCloud password, so if you want to change the password with just the passcode. Just click CANCEL.

5- Now you have your passcode activate but the other person can't change your iCloud passsword with simply your passcode on the phone so he can't unlock it.


I just think apple must detach that from the passcode, in my country people get robbed every day and this guys knows that they can change the iCloud password with just using the Passcode of the phone.


I just recomend to Apple to create a funtion where you can enable/disable this in: Setting > Touch id and passcode > (Change your iCloud with your Passcode)


So that way it's no so easy for anyone to chage your iCloud password and unlock the phone if he get your passcode in some way or other.


Still the iPhone is trying to ask me to put my iCloud password, the message say "there are some services on the iPhone that will not be available until you sign in next time", so what they are saying here is they just will activate this next time without asking you. Now know I know that if you put your iCloud password there it will just re enable that without you know it. Just ignore that.


Please Apple fix this.


Jul 20, 2020 4:08 PM in response to neftali5050

There is no way to secure a passcode that you have given to someone else and they have your phone. But, check out these security-related document:


If you think your Apple ID has been compromised https://support.apple.com/en-us/HT204145.

 

Security and your Apple ID https://support.apple.com/en-us/HT201303

 

iCloud security overview  https://support.apple.com/en-us/HT202303

 

Ways to keep your information safe on Mac https://support.apple.com/en-gb/guide/mac-help/mh11402/mac

 

Using app-specific passwords https://support.apple.com/en-us/HT204397

 

Use Two-factor authentication for Apple ID https://support.apple.com/en-us/HT204915

Jul 22, 2020 1:22 PM in response to neftali5050

Thank you I will try to contact them to make this suggestion.


As you can see here, the problem is when you set you new Passcode, your iPhone ask you this, but must people just click continue on this Screen and activate your passcode to change your Apple ID/iCloud password. To me this is an option that it's critical for a security on the iPhone, in my opinion that must be a feature that you enable/disable separatly. As you can see you only have two options Cancel or Continue, that can make you think if you cancel now you can't activate the passcode on the device but if you click Cancel it Activate the Passcode anyway. But later will try to ask you to put your iCloud password to activate this feature becouse some iCloud services will not work.




Jul 20, 2020 4:36 PM in response to donv_the_ghost

Thank you for the info I will check it out.


But what I ask was, How can I secure my iCloud password so someone else can't change it with the iphone passcode?


Yes I give the passcode to the guy but it's no supose to be dificult to change the iCloud password... I try to use the Recovery Key funtion, that looks like what I'm looking for. At first this funtion disable changing the iCloud password with the iPhone Passcode, you have to put your phone number, then the code they send to you, and the Recovery Key. This is the way I want. But later I check and again you can change the iCloud password with the Passcode.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

How can I secure my iCloud password that can't be changed with iphone passcode?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.