Secure Reset

Let's assume my iPhone has been hacked. Maybe I had an old IOS with a bug or maybe it's something new but somebody installed something like a rootkit on it.

How can you make sure the phone is clean again by wiping it? How would you know the phone does not just act as if it got wiped?

Can an iPhone be reset so it absolutely safe nothing bad is still on it? (Assuming no hardware modifications and Apple playing by the rules and firmware signatures have not been compromised)

I'm asking in the context that even keyboard firmware has been used in the past to reinstall rootkits after the mac has been wiped for example. Seems really hard to be sure of anything these days ...

Thanks for the help guys!

Posted on Dec 24, 2022 11:08 AM

Top-ranking reply

IdrisSeabright

Community+ 2026

Level 10

189,231 points

Posted on Dec 24, 2022 1:16 PM

You have two choices: 1) you do a factory reset according to Apple’s instructions and assume that it works (which, given the amount of money and effort Apple puts into security doesn’t seem unreasonable) or 2) you get rid of the device because you will never believe that it’s secure. There is no way you, as an end user, can do the forensics necessary to prove that the device is 100% secure.

You have yet to give any reason why you think the phone is compromised so I’m not sure what is causing this level of distress. Your time would be far better spend making sure your accounts, such as your Apple ID, email accounts, bank accounts are secure. Those are all far more likely to be compromised than your phone.

View in context

18 replies

Dec 26, 2022 9:55 AM in response to m.schwaller

m.schwaller wrote:

After some research and the input of the members the conclusion is the following:

It is not possible to securely reset an iPhone.

Factory Reset on the device itself is the only option and if your phone is indeed hacked you cannot trust that function anymore.

Nonsense.

m.schwaller Author

Level 1

11 points

Dec 26, 2022 10:08 AM in response to IdrisSeabright

Sadly I can't put much trust in your "believe in Apple magic". Of course i'm very open to information how you think a button on a hacked phone could be trusted? Did you notice the Jailbreaks for IOS 15 and 16 were just released? Are you just offended that a very secure device like the iPhone has still miles to go in security?

Some of us need more than an "Apple Privacy Slogan" to design secure processes for our customers etc. Things like that are start: Secure Enclave Processor security certifications – Apple Support (UK) Would love to see a CC EAL7 here some day :-)

m.schwaller Author

Level 1

11 points

Dec 26, 2022 1:09 PM in response to Lawrence Finch

Thanks man - in the meantime i came to the same conclusion despite the "help" of others ;-) Glad to see there some people around that know their stuff! Sure would be nice to find some documentation on how it is prevented that the device just acts like being in DFU mode but its a good start I think :-)

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Secure Reset