I asked questions about security and malware on July 29

Hi again, Helpful Folks:

I got sidetracked with life issues, but

I’m back now to move forward.

The post I made was retitled to:

Frequent security updates on iOS/iPadOS and need for anti-virus software

And I stopped responding, due to time constraints, and the post was closed.

I got great responses. I recall commenter names “MrHoffman” and “Mac Jim ID”,

if those help.


I came up with two possible solutions to my dilemma.

They might be on the heavy-handed side of things, but

I think I will do one of them. I wanted feedback on the two options

I came up with. But before I posted them, I wanted to see if I could

link my new comments to that old post—which has been closed.


Thanks in advance!

Posted on Sep 16, 2025 10:47 PM

Reply
3 replies

Sep 17, 2025 4:42 AM in response to NventiveGuy

Providing your iPad has been kept up-to-date with system software updates, you should not be overly concerned for your iPad being directly compromised by malware. Due to the sandboxed system architecture of iOS/iPadOS, unless jailbroken, your iPad is not susceptible to traditional malware infection per-se. However, as with all computer systems, there are still vulnerabilities and exploits to which you remain vulnerable. 


For older devices, no longer benefiting from regular security updates, the risk of an unpatched vulnerability being exploited increases. Regardless of the installed version of iPadOS, there are useful mitigations that can be used to significantly reduce your exposure to risk. For iPad, ensure that you have updated to the most recent version of iPadOS - the current version for recent models of iPad being iPadOS 18.7 or iPadOS 26.


The majority of threats to which you will be invariably exposed will surface via web pages or embedded links within email or other messaging platforms. Browser-based attacks can be largely and successfully mitigated by installing a good content and Ad-blocking product. One of the very best and most respected within the Apple App Store - designed for iPad, iPhone and Mac - is 1Blocker for Safari:

https://apps.apple.com/gb/app/1blocker-for-safari/id1365531024


1Blocker is highly configurable - and crucially does not rely upon an external proxy-service of dubious provenance, often utilised by so-called AntiVirus products intended for iOS/iPadOS. Instead, all processing by 1Blocker takes place on your device - and contrary to expectations, Safari will run faster and more efficiently.


Unwanted content is not simply filtered after download (a technique used by basic/inferior products), but instead undesirable embedded content is blocked from download. 1Blocker has also introduced its new “Firewall” functions - that are explicitly designed to block “trackers”. Being implemented at the network-layer, this additional protection works across all Apps. Recent updates to 1Blocker has introduced additional network extensions, extending protection to other Apps.


A further measure to improve protection is to use a security focussed DNS Service in preference to automatic DNS settings. This can either be set on a per-device basis in Settings, or can be set-up on your home Router - and in so doing extends the benefit of this specific protection to other devices on your local network. I recommend using one of the following DNS services - for which IPv4 and IPv6 server addresses are listed:


Quad9 (recommended)


9.9.9.9

149.112.112.112

2620:fe::fe

2620:fe::9



OpenDNS


208.67.222.222

208.67.220.220

2620:0:ccc::2

2620:0:ccd::2



Cloudflare


1.1.1.1

1.0.0.1

2606:4700:4700::1111

2606:4700:4700::1001



Security focused DNS providers intentionally "sink hole" known bad or malicious websites and resources - this providing an additional layer of protection beyond that provided by your device and its Operating System. These DNS services will, when used alongside 1Blocker or other reputable Content Blocker, provide defence in depth.


There are advanced techniques to further “harden” iOS/iPadOS (such as using DoH, DoT and DNSSEC). Apple has introduced its Private Relay service for iCloud+ subscribers - this in part employing ODoH (a variant of DoH) as an element of this new functionality. DoH and DoT are now natively supported by iOS/iPadOS, however these protocols are only surfaced through adding a management profile to the device; this is easily implemented through using a third-party App such as DNSecure:

https://apps.apple.com/gb/app/dnsecure/id1533413232

Sep 19, 2025 10:59 AM in response to NventiveGuy

I was trying to say that the former post replies have copious great advice

on how secure iOS is with sandboxing, encryption, secure boot, Blast Door, etc.

What I want is feedback on my ideas, not on these iOS features.


I want to make two things more secure: 

-my devices. 

-my data (incl clouds).


I’ve been hacked, more than once. 

I don’t know if I’m still watched/tracked by miscreants 

looking for more (or ongoing) vulnerabilities. 

I sometimes backup on public wifi every week, or 

more frequently; will stop that soon. 


I want to manage my 4 clouds better. (50% redundancy in 3.) 

I’ll focus only on my iCloud drive here. 


My Plan: 

Get a new device to replace my iPad. 

I have two ideas/options for this device: 


Option 1

Replace current iPad with newer; use current Apple Id on it. 


   Using the current Apple Id means I could weed and enhance files 

   via built-in apps used to create them, or via Files. And also 

   via 3rd-party apps which I currently “own”. 

   I’d keep using current emails, but soon unsubscribe from 

   all but most important ones (forward those to Option 2 device later). 


Option 2: Buy a newer iPad; use a new Apple Id on it. 


   New Apple Id cuts ties to current iCloud, and (soon) I will revise 

   most email subscriptions (forward a few to device w new Apple Id). 

   A new IP address also disconnects from more tracking. 

   (But I’m not sure I can use YouTube on VPNs.)


   I could use this 2nd new device+iCloud in two ways:


2a—If I didn’t copy files in my current iCloud into this new iCloud, 

   I would weed current files via iCloud+browser. 

   If I use Advanced Data Protection on it (+probably Lock Down),

   is this access more secure than via current Apple Id on current iCloud? 

   I could enhance files with Photos, Pages, or Notes. 

    But to enhance files using 3rd-party apps, I think I’d have to 

   copy into the new iCloud, 

    enhance, and then

    copy them back into the old iCloud. Is that correct? 


2b—If I did copy all current iCloud files into this new iCloud, 

    I could also weed & enhance files with built-in apps. 

    Before that, I’d also turn on Advanced Data Protection. 

   And Lock Down, for max security; probably leave it on 

   while enhancing pics or converting existing text files. 

    But I couldn’t use full functionality of email 

    during the transition w ADP+LD on. It would be much easier 

    after I move email subscriptions to new email address(es), 

   when Lock Down would likely be off. Oh, and 

    I’d lose photos’ EXIF data when moved in/out w Lock Down on?


Option 1 is perhaps faster for enhancing files, but likely less secure. 

(Hackers know my emails & may still phish, etc.) 


Option 2 ways are likely more secure, because of new emails & iCloud. 

Having ADP & LD enabled would a strain, before moving off current emails. 


Option 3: If I buy both devices now, I’d want to air-gap them. 

I don’t accept Google’s requests to look for other devices in my net. 

I fear it could enable tracking or some other vulnerability 

by doing their “look for other devices” anyway. NFC or BT? 

Maybe I’m overly suspicious? 


Option “0”: I could also use current device & Apple Id to do 

the weeding and enhancing. No increase of security, but 

is bigger screen and may work better for graphics! 

Then Erase/Reset the current iPad and go to a new one—not sure

if it would have my existing Apple Id or a new one on it.


I only share this situation, because I think a lot of people are in it.

And would benefit from seeing a more complete solution.


— — —

OK, there’s my thinking. Please give feedback on it. 

I’ve spent 40+ hrs on it, over 2 months, but don’t know all the ins/outs

of devices, iOS & modes, iCloud, apps, etc etc etc etc … ad nauseum. 

And I’m heading to visit family soon—including my sweet little GrandSons. 


PS. I just found two iPad Mini 6’s for a low price. Am buying! 

Don’t know if this makes things easier or harder. 

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

I asked questions about security and malware on July 29

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.