皇家华人

Section Menu

Securing Your iOS Device

Apple iOS Data Protection

All iPhones since the 3gs, all models of iPad, and iPod Touch models since the 3rd generation include hardware encryption. Encryption is enabled automatically when the device is configured to access 皇家华人 Exchange email using ActiveSync, which will require you to set a passcode.

If you do not configure 皇家华人 Exchange using ActiveSync, you can manually enable encryption by setting a device passcode:

  1. Tap Settings > Touch ID & Passcode (or Face ID & Passcode)
  2. Follow the prompts to create a passcode. Apple recommends using at least a 6-digit passcode.
  3. After the passcode is set, scroll down to the bottom of the screen and verify that the text 鈥楧ata protection is enabled' is visible.

For more information, refer to the Apple document.

Use of Touch ID or Face ID is acceptable, since the Apple implementation stores the biometrics in a Secure Enclave and works in conjunction with the passcode.

For more information, refer to the Apple document.

If you use iTunes to synchronize and backup your device, configure encrypted backups by enabling the iTunes option 鈥榚ncrypt iPhone backups' on the general preferences page for the phone. Then sync the device again to complete the process.

Privacy Settings for iOS

Apple provides a number of settings to control privacy in iOS.

In order to best protect your privacy, we recommend the following settings:

  1. Settings > Touch ID & Passcode (or Face ID & Passcode)
  2. Scroll down to the section labeled 鈥楢llow Access When Locked'
  3. Set the following options to Off:
  4. Control Center
  5. Siri
  6. Reply with Message
  7. Return Missed Calls
  8. USB Accessories
  9. For each app listed, you can choose whether it is allowed to popup notifications, and most apps will let you disable notification on the lock screen and whether to show previews. We suggest at a minimum disabling notification previews for Mail, Messages, and any other messaging apps you use, in order to prevent someone else viewing messages that might be confidential.
  10. Turn on 鈥楨rase Data'
  11. Settings > Privacy > Location Services
  12. You can choose what abilities to allow each app that makes use of Location Services. Most apps should probably be set to 鈥楴ever' or 鈥榃hile Using'. Only select 鈥楢lways' for apps that absolutely need to access your location at all times, and after reviewing the app's security and privacy policies.
  13. Settings > Notifications
  14. You can choose to set 鈥楽how Previews' to 鈥榃hen Unlocked' so that notification previews (snippets of notifications, such as incoming text messages) are not displayed when the screen is locked. Or, you can choose 鈥楢lways' and then customize which apps can display notification previews.

We also recommend that you turn ON the following settings for any iOS device:

  • Settings > Privacy > Advertising > Limit Ad Tracking
  • Settings > Safari > Do Not Track

For more information:

More information