How safe is Apple's Bluetooth wireless keyboard?

I have just connected my Apple Bluetooth wireless keyboard and received phishing emails, while also identifying four different threats on two different computers (MacBookAir and MacBookPro) after running www.malwarebytes.com/mac free download, per Apple Care's assistance. How safe is the Apple wireless keyboard requiring Bluetooth? Would a USB wireless keyboard be safer? What should I use to keep my information secure?

MacBook Pro, iOS 10.1.1, Mac OS High Sierra 10.13.4

Posted on Apr 26, 2018 4:48 PM

Reply
22 replies

Apr 26, 2018 6:12 PM in response to RJMendez

Bluetooth is a short range wireless technology. There is no known way adware can get installed on a computer through a bluetooth connection to a keyboard.


The connection is one to one only and is encrypted after being paired. Any moderately recent Mac will automatically engage 128 bit encryption on blluetooth connections with supported devices. Like Apple's BT keyboard.


The fact you had certain adware detections after using the keyboard, is coincidental at best.


You can read more about the security level of Bluetooth here:

https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-121r2.pdf


Document published by the National Institute of Standards and Technology form the U.S Department of Commerce.

Apr 27, 2018 7:12 AM in response to RJMendez

There is no network when using a keyboard. It's a one to one connection.


Also Type 3 bluetooth devices which are the ones used in commercial products such as keyboards are very short range. 30ft or 10m of range. And get easily obstructed by walls.


Unless you believe there is someone sitting outside your window trying to hijack the Bluetooth connection between a keyboard and a computer there is nothing going on.


Again, bluetooth is encrypted once the connection is established.


It is highly secure, and the chances of getting hijacked through bluetooth are very very very slim to none.

Apr 27, 2018 7:27 AM in response to IdrisSeabright

Firstly, to respond to IdrisSeabright, please note that the article was posted by Phil0124.


Secondly, have you read the article? It states, "Communications on the wired network are not protected by Bluetooth or IEEE 802.11 security capabilities. Therefore, end-to-end security is not possible without using higher-layer security solutions atop the security features included in Bluetooth and IEEE 802.11" (p. 21).


Furthermore, in response to your suggestion on how to protect your Mac, the lists of security features recommended to use with Bluetooth, per the article are many and span many pages, leaving me to believe Bluetooth is not secure, without an IT team to manage the threats:


  • "4.1 Bluetooth Vulnerabilities Table 4-1 provides an overview of a number of known security vulnerabilities associated with Bluetooth. The Bluetooth security checklist in Section 4.4 addresses these vulnerabilities" (pp. 47-50).
  • "4.2 Bluetooth Threats" (pp. 50-51)
  • "Security Recommendations" span five pages (53-58) for organizations to use as checklist and guide.


Bluetooth security for individual home users would be helpful... Thank you.


NOTE: To clarify, all page references refer to the PDF page number (67 in total).

Apr 27, 2018 7:57 AM in response to RJMendez

Apple by default uses the Level 2 or above. And with newer devices Level 3 and above.


But again, low range, is there someone outside your window trying to break into the bluetooth connection between your keyboard and your computer?


No one is breaking into the bluetooth connection if they are not within the vicinity of the devices. 10 feet or less


You do understand there would need to be someone there with you for this to be a possibility.


Bluetooth does not work the way you think it works.


The adware did not come from the bluetooth connection. Stop wit the paranoia about bluetooth.

Apr 26, 2018 8:00 PM in response to Phil0124

Very resourceful document. Thank you for sharing that. I found some items that make me a bit nervous still...


There is Bluejacking which resembles "spam and phishing attacks" (p. 51). Also, antivirus protection is recommended, "to ensure that known malware is not introduced to the Bluetooth network" (p. 58).


"Bluetooth wireless technology and associated devices are susceptible to general wireless networking threats, such as denial of service (DoS) attacks, eavesdropping, man-in-the-middle (MITM) attacks, message modification, and resource misappropriation. They are also threatened by more specific attacks related to Bluetooth wireless technology that target known vulnerabilities in Bluetooth implementations and specifications. Attacks against improperly secured Bluetooth implementations can provide attackers with unauthorized access to sensitive information and unauthorized use of Bluetooth devices and other systems or networks to which the devices are connected" (p. 6).

Apr 27, 2018 6:59 AM in response to RJMendez

RJMendez wrote:



There is Bluejacking which resembles "spam and phishing attacks" (p. 51). Also, antivirus protection is recommended, "to ensure that known malware is not introduced to the Bluetooth network" (p. 58).

Antivirus protection is rarely recommended for Macs by people who understand them. Re-read the article I linked to above it you want to understand how to protect your Mac.

Apr 30, 2018 7:40 AM in response to Phil0124

Bluetooth break-ins can happen within 10 feet or less, through glass, with someone there, yes? So, how safe is Bluetooth used in a car from 2012? You know those long highway drives when the same car is following beside, behind, or in front of you for a very long stretch on cruise control, would that be a time to consider turning off Bluetooth for security purposes in the vehicle, to prevent a hack or threat? Please explain. I'm no longer worried about Bluetooth wireless in the home, yet wonder about its use in the car. It seems to automatically turn on in my phone settings each time I enter my vehicle too, which I then have to remember to turn off before exiting...

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

How safe is Apple's Bluetooth wireless keyboard?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.