Help How can I secure my data and iOS devices without having to destroy either?

[wordsonscreen]

Some people have suggested getting a lockbox/storage box but my devices will be found in my home. Hiding them is not an option. However, I want no one to be able to access my data but be able to use my devices if needed. AND I want to be able to access my data and devices in case something does not go accordingly. How can I achieve this? Any input would be appreciated - thank you!

I wonder if there is a way to auto reset in case of incorrect password etc?? Thoughts? How are you handling your devices?

 

[grungeCat]

The best solution I can think of is : make a full iOS device backup on PC/Mac computer (I assume you have a PC or Mac computer) and then encrypt your entire hard disk with VeraCrypt. Then format every device that you made backup of. For this soultion you have to make up a very long, strong password and write it down on a piece of paper. Basing on this password VeraCrypt will make a very strong AES key which is practically impossible to break without knowing a password. It would be best if you learn it by heart but there's risk you won't remember it after unsuccessful attempt anyway. You have to protect this piece of paper from unauthorized access. After all it's easier to hide a piece of paper than entire device. I think there's no other option.

 

[wordsonscreen]

The best solution I can think of is : make a full iOS device backup on PC/Mac computer (I assume you have a PC or Mac computer) and then encrypt your entire hard disk with VeraCrypt. Then format every device that you made backup of. For this soultion you have to make up a very long, strong password and write it down on a piece of paper. It would be best if you learned it by heart but there's risk you won't remember it after unsuccessful attempt anyway. You have to protect this piece of paper from unauthorized access. After all it's easier to hide a piece of paper than entire device. I think there's no other option.

wow, thank you so very much cat!!! So basically consolidate in one spot and encrypt it all. What are thoughts on cloud data??? just secure with passwords??

 

[WFJ74]

iCloud backups can be retrieved by Apple and handed over to authorities with a court order (look up some mass-shooters in the US). Would they go that far for a suicide? Doubtful. But it could happen I suppose. Local backup/encryption as Cat suggested is the best option and potentially deleting your iCloud backup. Another thing to consider along with Cat's steps is buying a used or older iPhone (but don't activate it), restoring your backup to it, turning it off and hiding it somewhere then deleting your cloud backup and other devices.

 

[checkouttime]

just downloads this

Darik's Boot and Nuke - Wikipedia

en.wikipedia.org

 

[UterEntonaur]

just downloads this

Darik's Boot and Nuke - Wikipedia

en.wikipedia.org

Does dban work on iOS devices?

I wonder if there is a way to auto reset in case of incorrect password etc??

There is an option to erase the device on X number of incorrect attempts (Settings > Touch ID & Passcode > Erase Data) but it's trivial to bypass this "soft-limit" using brute-force tools that connect directly via the lightning/USB-C port. There's was even some jailbreak tools that do this for very old iOS versions/devices (that stopped receiving security updates).

Generally, anything stops being secure once you have the physical device. If you read some of the news articles that have been published over the last few years (e.g. FBI vs Apple), you'll see that they all revolve around the fact that data was usually on the device itself (and never backed up/saved/accessible via the cloud).

If you're really that worried, disconnecting iCloud from your device might be a good start, and of course remembering to avoid using TouchID/FaceID.

 

[checkouttime]

I just saw it mentioned by someone else. i'm not an expert on it myself. I just looked and it can be used on MAC's. there are video's of how to do it if you google it. In fact i just checked and it mentions iPhone's iPads aswell. but it mentions something about not being able to detect or erase SSD(I don't know what that is). It does say this though

"Should you need to erase data from a SSD or require a certificate of data removal, request a free trial of Blancco Drive Eraser."

I have read about the fights apple had, it was regarding terrorists phone's. I'm not quite sure if they would look at a random suicide case in the same way as the need to get in a terrorists phone in the same way IMO. I did look into if they could get into apple products and apparently a company can do it.

I never save stufff to the cloud, i don't even know anything about it lol. but i'm not particularly bothered about someone looking on my computer, i mean whats the worst thing they can find an email address for a source of N which is already available on the internet. not exactly a big catch is it lol.

 

[wordsonscreen]

Does dban work on iOS devices?

no

There is an option to erase the device on X number of incorrect attempts (Settings > Touch ID & Passcode > Erase Data) but it's trivial to bypass this "soft-limit" using brute-force tools that connect directly via the lightning/USB-C port. There's was even some jailbreak tools that do this for very old iOS versions/devices (that stopped receiving security updates).

only on iphones - not on any other devices :(

Generally, anything stops being secure once you have the physical device. If you read some of the news articles that have been published over the last few years (e.g. FBI vs Apple), you'll see that they all revolve around the fact that data was usually on the device itself (and never backed up/saved/accessible via the cloud).

If you're really that worried, disconnecting iCloud from your device might be a good start, and of course remembering to avoid using TouchID/FaceID.

Good reminder, thank you!

just downloads this

Darik's Boot and Nuke - Wikipedia

en.wikipedia.org

thanks but I'm not looking for erasure - just encryption. There definitely several hard sanitization tools available tho.

iCloud backups can be retrieved by Apple and handed over to authorities with a court order (look up some mass-shooters in the US). Would they go that far for a suicide? Doubtful. But it could happen I suppose. Local backup/encryption as Cat suggested is the best option and potentially deleting your iCloud backup. Another thing to consider along with Cat's steps is buying a used or older iPhone (but don't activate it), restoring your backup to it, turning it off and hiding it somewhere then deleting your cloud backup and other devices.

Thank you! What are your thoughts on data on google servers? I feel like in order to access those accounts - someone would need to know they exist?

 

[logan]

Thank you! What are your thoughts on data on google servers? I feel like in order to access those accounts - someone would need to know they exist?

You can definitely store your encrypted backup there.

 

[wordsonscreen]

You can definitely store your encrypted backup there.

Can you say more? how exactly do you see this working?
Thank you!

 

[logan]

Can you say more? how exactly do you see this working?
Thank you!

You encrypt your data locally on your computer with VeraCrypt, for example, and then upload the encrypted archive to the cloud.
This is then very secure and you have your backup in a central location.