Someone Watched You Type Your Passcode: What to Do Today
You typed your passcode at a bar, on a train or at a friend's table, and you think someone saw it. If they also get your phone, that code opens almost everything. Change it now, then add a lock that does not depend on it.
Get an email when Cryptile is on the App Store
What do I need to know?
- The passcode is the master key. It opens Photos, Hidden, Messages and Notes.
- A new passcode ends the risk from that code. It takes about a minute.
- Stolen Device Protection helps with your account, not your photos. Turn it on before you need it.
What can someone do with my passcode?
If they hold your unlocked phone, they can open any app that has no lock of its own. That includes Photos and the Hidden album, which opens with the same passcode. Apple's list of Stolen Device Protection actions does not include opening Photos, Messages or Mail.
They cannot read your photos from a distance. They need the phone in their hands.
What should I do right now?
- Open Settings → Face ID & Passcode and enter your passcode.
- Tap Change Passcode. Pick a longer code, not a date or a pattern on the keypad.
- Tap Stolen Device Protection and turn it on. It needs iOS 17.3 or later.
- Under Require Security Delay, choose Always if you want the checks at home too.
- Touch and hold your most private apps and tap Require Face ID. This needs iOS 18 or later.
- In Settings, tap your name and check the list of devices for any you do not know.
If you think the phone is already gone, use Find My to mark it lost.
What if the person already had my phone?
Check Settings → Face ID & Passcode for a second face you did not add. Check Photos for Recently Deleted items you did not delete. Change your Apple Account password from a trusted device.
If someone is threatening to share your photos, do not pay. Save the messages, block the sender and report it at ic3.gov or to local police.
How does a vault fit in?
Move the photos you cannot afford to expose into a vault that does not use your iPhone passcode. Then a watched passcode opens the phone but not the vault. Delete the originals and empty Recently Deleted.
What this doesn't protect against
A vault does not help if the person also watched you draw its pattern. It does not undo anything already sent, synced or backed up elsewhere. A phone snatched while the vault is open stays open until it auto-locks. Cryptile cannot reset a lost pattern, so keep the recovery phrase safe.
Apple's reference for the settings above is About Stolen Device Protection. This page is not based on one news event; no live source could be loaded when it was written.
Do it with Cryptile
Cryptile vaults open with a drawn pattern, not your passcode. Files are encrypted with AES-256-GCM under a key made on your device. A different pattern opens a different vault.
Cryptile is free to start. Get an email when Cryptile is on the App Store