iOS Hardening Guide

SecurityPrivacy

This basic checklist is designed to strengthen the security and privacy of iOS devices. These settings are opinionated and intended for low risk users.

High-risk users should review the additional resources at the end of this guide. Other considerations may include:

  • Lockdown mode
  • Puchasing the device anonymously
  • Avoiding Apple ID and other cloud services

Settings

Open the Settings app and review the settings in each section below.

General

Software Update

  • Automatic Updates: Enable
    • iOS Updates: Enable
    • Security Responses & System Files: Enable
    • iOS Updates: Enable

AirDrop

  • Receiving Off: Select
  • Bringing Devices Together: Disable
  • Use Cellular Data: Disable

AirPlay & Continency

  • Automatically AirPlay: Never
  • Transfer to HomePod: Disable
  • Handoff: Disable
  • Continuity Camera: Disable
  • AirPlay Receiver: Disable

Search

  • Show Recent Searches: Disable
  • Show Related Content: Disable
  • Search Engine: DuckDuckGo
  • Help Apple Improve Search: Disable

Siri

  • Talk to Siri: Off
  • Press Side Button for Siri: Off
  • Siri & Dictation History: Delete Siri & Dictation History
  • Reset Hidden Suggestions: Press
  • Allow Notifications: Disable
  • Show in App Library: Disable
  • Show When Sharing: Disable
  • Show Listening Suggestions: Disable

Face ID & Passcode

  • Face ID: Enable
  • Require Attention for Face ID: Enable
  • Attention Aware Features: Enable
  • Stolen Device Protection: Enable
    • Require Security Delay: Away from Familiar Locations
  • Passcode Length: At least 6 digits
    • Consider alphanumeric passcode
  • Require Passcode: Immediately
  • Erase Data after 10 failed attempts: Enable

Privacy & Security

Location Services

  • For each app, set the location access to Never except for essential apps.
  • System Services:
    • iPhone Analytics: Disable
    • Improve Maps: Disable
    • Status Bar Icon: Enable

Tracking

  • Allow Apps to Request to Track: Disable
  • Ensure all apps on this page are disabled

Analytics & Improvements

  • Share iPhone & Watch Analytics: Disable
  • Share iCloud Analytics: Disable
  • Improve Siri & Dictation: Disable
  • Improve Assistive Voice Features: Disable
  • Improve AR Location Accuracy: Disable

Apple Advertising

  • Personalized Ads: Disable

Other Privacy Settings

Review the remaining privacy settings and disable app access for anything you are not comfortable with. Always grant the least privileges required to fulfil the need.

Additional Resources