Criminals use Apple’s recovery key to block users from accessing their stolen iPhones: report

Apple’s recovery key feature allows iPhone users to reset their Apple ID password or regain access to their Apple ID account. Now, a Wall Street Journal report shows how cybercriminals and thieves can prevent a user from accessing a stolen iPhone using Apple’s advanced security setting. With the randomly generated 28-character sequence, a thief can reset the original iPhone owner’s Apple ID password in the Settings app. Criminals can then disable Find My iPhone on the device to prevent the victim from tracking their location and erase the data on the phone.

According to the Wall Street Journal report, Greg Frasca, 46, lost access to his iPhone 14 Pro, which was stolen from a Chicago bar in October. The thieves spotted him entering his bar passcode and used it to change Frasca’s Apple ID password after the phone was stolen. They allegedly activated the recovery key feature and used the 28-character code to prevent Frasca from tracking the stolen device through Apple’s Find My feature. This prevents the victim from remotely wiping the device via iCloud and accessing files such as photos and videos.

Once criminals gain access to the stolen iPhone, they can steal money through Apple Pay or other banking and financial apps. They can also access sensitive data on the iPhone, including photos, files, and emails.

Apple introduced recovery keys in 2020 with the release of iOS 15 to improve Apple account security. A recovery key can be used to reset the password or regain access to an Apple ID. After a user generates a recovery key, Apple automatically disables account recovery. If the user loses the device and the recovery key, their account may be permanently locked. The recovery key can be accessed via Settings Or System Preferences on a trusted device signed in with your Apple ID.

Apple reportedly responded to the issue, saying it was “still investigating additional protections against emerging threats like this.” The report quotes an Apple spokesperson as saying, “We sympathize with those who have had this experience and take all attacks against our users, however rare, very seriously. We work tirelessly every day to protect our users’ accounts and data, and are always looking for additional protections against emerging threats like this.”

The latest incident highlights the importance of protecting your iPhone. In public areas, iPhone users are recommended to use Face ID or Touch ID, Apple’s biometric unlocking mechanisms, to unlock their handsets. Additionally, users are advised to use complex passwords with numbers and letters, to protect their devices.

---