Is my data safe on my ipad in a public place with wifi and bluetooth turned off and in airplane mode, or can someone just sit in church, a restaurant, etc. and read it like I have heard can be done with unsheathed or otherwise unprotected credit cards?
iPad mini 5, iPadOS 17
Aside from the inherent security that is built-in to your iPad, without an active network connection nobody can remotely access your iPad or any data stored thereon. Assuming that you have secured your iPad with a Passcode known only to you, if locked your iPad cannot be accessed by anyone other than you that has physical access to it.
Nobody can gain access to your iPad without successfully entering the correct device Passcode - and for this, there are a limited number of tries before the iPad will automatically become disabled. As such a brute-force attempt to access the iPad, by guessing the correct passcode, is highly unlikely to be successful. Only if your device Passcode is known to someone who has access to your iPad will any locally stored data be at risk of discovery.
iOS/iPadOS is architecturally designed to protect the owners data.
All locally stored data is encrypted; by design, the only copy of the encryption keys necessary to access local data are held within the Secure Enclave - the device security chip. The device Passcode unlocks the Secure Enclave, which in turn releases the encryption keys to the Operating System while the device remains unlocked.
If an incorrect Passcode is repeatedly entered, the Secure Enclave automatically wiped and the device disabled - an operation that erases all stored encryption keys. This is known as a crypto-erase. Once erased, all locally stored data is permanently beyond reach and cannot be recovered.
Aside from the inherent security that is built-in to your iPad, without an active network connection nobody can remotely access your iPad or any data stored thereon. Assuming that you have secured your iPad with a Passcode known only to you, if locked your iPad cannot be accessed by anyone other than you that has physical access to it.
Nobody can gain access to your iPad without successfully entering the correct device Passcode - and for this, there are a limited number of tries before the iPad will automatically become disabled. As such a brute-force attempt to access the iPad, by guessing the correct passcode, is highly unlikely to be successful. Only if your device Passcode is known to someone who has access to your iPad will any locally stored data be at risk of discovery.
iOS/iPadOS is architecturally designed to protect the owners data.
All locally stored data is encrypted; by design, the only copy of the encryption keys necessary to access local data are held within the Secure Enclave - the device security chip. The device Passcode unlocks the Secure Enclave, which in turn releases the encryption keys to the Operating System while the device remains unlocked.
If an incorrect Passcode is repeatedly entered, the Secure Enclave automatically wiped and the device disabled - an operation that erases all stored encryption keys. This is known as a crypto-erase. Once erased, all locally stored data is permanently beyond reach and cannot be recovered.
Thank you. I really appreciate this thorough explanation. I assumed my concern was overblown but sought clarity and certainty. I had always wondered how unshielded credit cards could be read in someone’s pocket or purse. I knew the technology was different, but wondered if it was too close in design for comfort.
You're very welcome.
Hacking Risk of an Offline iPad in Public
