Worried About Spyware or Stalkerware on Your iPhone
You think someone may be watching what you do on your iPhone. Most of the time that is not hidden spyware. It is someone with your passcode, a device signed in to your Apple Account, or sharing you forgot you turned on. Apple's own tools can check all of these in a few minutes.
Try Cryptile free: join the beta on TestFlight
What do I need to know?
- Start with access, not malware. Your account, your passcode and your sharing settings are the usual way in.
- Mercenary spyware is rare. Apple says it targets a very small number of people because of who they are or what they do.
- A vault cannot beat spyware on an unlocked phone. Anything open on screen can be seen.
If you might be in danger, read this first
If the person you are worried about is a partner or ex, they may notice when you change settings. That can make things worse. Think about timing, and use a phone they cannot reach if you need help.
The National Domestic Violence Hotline (US) helps with safety plans, including around phones. In danger, call your local emergency number.
What should I check on iOS 27?
- Run Safety Check. Settings → Privacy & Security → Safety Check → Manage Sharing & Access. It shows who you share location and data with, and which apps can reach what. Apple notes it needs iOS 16 or later (Apple).
- Check your Apple Account devices. Settings → your name, then scroll to the device list. Tap anything you do not recognise and choose Remove from Account.
- Change your Apple Account password. Settings → your name → Sign-in & Security → Change Password (Apple).
- Look for configuration profiles. Settings → General → VPN & Device Management. Apple says profiles can allow access to data or location. Delete one you did not install, then restart (Apple). If the phone belongs to your work or school, ask them first.
- Review your apps. Swipe left past your last Home Screen to the App Library and search the full list. Delete anything you do not recognise (Apple).
- Change your passcode and reset Face ID if you did not add an alternate appearance yourself.
- Update iOS. Apple recommends keeping devices up to date (Apple).
What are Apple threat notifications?
Apple sends threat notifications to people it believes were targeted by mercenary spyware. They appear on the Lock Screen and in Settings, by email, and as a banner at account.apple.com (Apple).
Apple says these notifications never ask you to click links, open files, install apps or profiles, or give your password. A message that asks for any of those is not from Apple. If you get a real one, Apple suggests the Access Now Digital Security Helpline.
Should I turn on Lockdown Mode?
Apple built Lockdown Mode to protect against extremely rare and highly sophisticated attacks. Apple says it is for the very few people who might be personally targeted because of who they are or what they do.
To turn it on: Settings → Privacy & Security → Lockdown Mode → Turn On Lockdown Mode, then Turn On & Restart. Most people do not need it. The checks above matter more for them.
Where does a vault fit?
A vault protects files at rest: photos sitting on the phone, in a backup, or in iCloud. Someone who opens Photos with your passcode, or downloads your backup, finds nothing readable in it.
It does not protect against software watching an unlocked phone. If spyware can see your screen, it can see an open vault too. Do the checks first.
What this doesn't protect against
None of these steps can prove a phone is clean. Safety Check does not cover passwords you shared, social media, or another person's devices. If you still feel watched after the checks, get help from the hotline or Access Now rather than more apps.
Do it with Cryptile
Cryptile encrypts each photo, video, file and note with AES-256-GCM under a key made from your pattern on your device. There is no account and no server, and it locks again when you leave the app.
Cryptile is free for up to 2 vaults, 100 photos and 10 videos. Plus removes the limits for $19.99 a year (7-day free trial) or $39.99 once. The price is the same every day.