{"id":12065,"date":"2018-04-18T12:30:05","date_gmt":"2018-04-18T20:30:05","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2018\/04\/18\/news-5834\/"},"modified":"2018-04-18T12:30:05","modified_gmt":"2018-04-18T20:30:05","slug":"news-5834","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2018\/04\/18\/news-5834\/","title":{"rendered":"How to use a strong passcode to better secure your iPhone"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2018\/04\/breaking_into_iphone_3x2_1200x800_code_by_thinkstock_phone_and_hand_by_neonbrand_cc0_via_unsplash-100755002-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Lucas Mearian| Date: Wed, 18 Apr 2018 12:32:00 -0700<\/strong><\/p>\n<p>With police departments and federal agencies lining up to buy technology from two companies whose products <a href=\"https:\/\/www.computerworld.com\/article\/3268729\/mobile-wireless\/two-vendors-now-sell-iphone-cracking-technology-and-police-are-buying.html\" rel=\"noopener\" target=\"_blank\">can bypass iPhone security mechanisms<\/a>, experts said users concerned about privacy should use a strong passcode to help prevent unwanted access to data.<\/p>\n<p>That&#8217;s also true for enterprise users with iPhones that access potentially sensitive coporate data.<\/p>\n<p>Simply put, complex passcodes are always better for security, according to Phil Hochmuth, IDC&#8217;s program director for enterprise mobility. Common best practices for creating a hard-to-crack passcode includes using both upper- and lower-case characters, numbers and uncommon words.<\/p>\n<p>&#8220;I expect enterprises with high security concerns and large iOS corporate deployments will start requiring this and enforcing it via their MDM\/EMM platforms,&#8221; Hochmuth said via an email.<\/p>\n<p>Both Israel-based technology vendor\u00a0<a href=\"https:\/\/www.cellebrite.com\/en\/home\/\" rel=\"noopener nofollow\" target=\"_blank\">Cellebrite<\/a>\u00a0and Atlanta-based Grayshift have developed relatively inexpensive technology for unlocking iPhones.<\/p>\n<p>Grayshift&#8217;s GrayKey de-encrypting device is a 4-in. x 4-in. box with two iPhone-compatible lightening cables. It can reportedly unlock an iPhone in about two hours \u2013 if the owner used only a four-digit passcode. (A six-digit passcode can take three days or longer to crack.)<\/p>\n<p>One GrayKey box retails for $15,000 and is geofenced to a specific location, requiring an internet connection that enables up to 300 unlocks. There is also a $30,000 GrayKey model that can be used independent of internet connectivity and offers an unlimited number of device unlocks, according to <em>Motherboard<\/em>.<\/p>\n<p>GrayKey iPhone unlocker<\/p>\n<p>Cellebrite provides an iPhone unlocking service to law enforcement agencies; <a href=\"https:\/\/blog.malwarebytes.com\/security-world\/2018\/03\/graykey-iphone-unlocker-poses-serious-security-concerns\/\" rel=\"noopener nofollow\" target=\"_blank\">it reportedly charges<\/a> $5,000 per device.<\/p>\n<p>Last week,\u00a0<a href=\"https:\/\/motherboard.vice.com\/en_us\/article\/vbxxxd\/unlock-iphone-ios11-graykey-grayshift-police\" rel=\"noopener nofollow\" target=\"_blank\">Motherboard reported<\/a> that local and regional U.S. police departments and the federal government have been purchasing the technologies in earest.<\/p>\n<p>While both companies claim they only sell to police and government law enforcement agencies, it&#8217;s virtually impossible to keep that genie in the bottle, according to Nate Cardozo, a senior staff attorney with the Electronic Frontier Foundation (EFF), a non-profit digital rights group.<\/p>\n<p>&#8220;If you believe the only people will access to GreyKey or Celebrate are the cops, I&#8217;ve got a bridge to sell you,&#8221; Cardozo said.<\/p>\n<p>Go to Settings on your iDevice and scroll down to find access to your Passcode.<\/p>\n<p>At a minimum, consumers and businesses should use a six-character alphanumeric passcode or a pass phrase, which addresses risks associated with the leak of personal and enterprise data, according to Gartner research director Dionisio Zumerle.<\/p>\n<p>&#8220;In terms of risk assessment, everyone should assume that the tools are improving. Security is a moving target and people need to move with it,&#8221; said Gartner research vice president John Girard. &#8220;Using stronger PINs and passwords, phtases and so on is a necessary step forward.&#8221;<\/p>\n<p>While Apple&#8217;s Touch ID and Face ID help with security as well, they don&#8217;t preclude the use of a passcode to unlock a phone.<\/p>\n<p>Apple&#8217;s iOS 9 operating system boosted the default iPhone passcode from four digits to six; but an even stronger option, an alphanumeric passcode, is more secure.<\/p>\n<p>Next, select &#8220;Change Passcode&#8221;.<\/p>\n<p>If you&#8217;re ready to change your passcode, here&#8217;s how to do it:<\/p>\n<p>Final word of advice: Make sure you use a phrase or a combination of letters, numbers and symbols that&#8217;s easy to remember.\u00a0<\/p>\n<p><a href=\"https:\/\/www.computerworld.com\/article\/3268994\/apple-ios\/how-to-use-a-strong-passcode-to-better-secure-your-iphone.html#tk.rss_security\" target=\"bwo\" >http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2018\/04\/breaking_into_iphone_3x2_1200x800_code_by_thinkstock_phone_and_hand_by_neonbrand_cc0_via_unsplash-100755002-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Lucas Mearian| Date: Wed, 18 Apr 2018 12:32:00 -0700<\/strong><\/p>\n<article>\n<section class=\"page\">\n<p>With police departments and federal agencies lining up to buy technology from two companies whose products <a href=\"https:\/\/www.computerworld.com\/article\/3268729\/mobile-wireless\/two-vendors-now-sell-iphone-cracking-technology-and-police-are-buying.html\" rel=\"noopener\" target=\"_blank\">can bypass iPhone security mechanisms<\/a>, experts said users concerned about privacy should use a strong passcode to help prevent unwanted access to data.<\/p>\n<p>That&#8217;s also true for enterprise users with iPhones that access potentially sensitive coporate data.<\/p>\n<aside class=\"fakesidebar\"><strong>[ Further reading: <a href=\"https:\/\/www.computerworld.com\/article\/3235140\/apple-ios\/what-is-face-id-apples-new-facial-recognition-tech-explained.html#tk.ctw-infsb\">What is Face ID? Apple\u2019s facial recognition tech explained<\/a> ]<\/strong><\/aside>\n<p>Simply put, complex passcodes are always better for security, according to Phil Hochmuth, IDC&#8217;s program director for enterprise mobility. Common best practices for creating a hard-to-crack passcode includes using both upper- and lower-case characters, numbers and uncommon words.<\/p>\n<p class=\"jumpTag\"><a href=\"\/article\/3268994\/apple-ios\/how-to-use-a-strong-passcode-to-better-secure-your-iphone.html#jump\">To read this article in full, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[10480,714,11094],"class_list":["post-12065","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-ios","tag-security","tag-smartphones"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/12065","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=12065"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/12065\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=12065"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=12065"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=12065"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}