Apple devices have strong built-in protection, but security depends a lot on the settings: the screen passcode, updates and how well your Apple Account (formerly Apple ID) is protected. Anyone with access to your Apple Account can see your photos in iCloud, your messages and your location – and can even lock your device.
The main risks for children and young people: a passcode shared with friends, scam messages (“Your iCloud has been locked”), in-app purchases and sharing their location with the wrong people.
The menu names here are based on the latest versions of iOS/iPadOS. In older versions or other languages they may differ slightly.
⚙️ Step-by-step settings
Menu names may differ slightly depending on the model and version.
Set a strong passcode and Face ID / Touch ID
The passcode protects all your data and switches on the device's encryption.
- Open Settings → Face ID & Passcode or Touch ID & Passcode.
- Tap Turn Passcode On or Change Passcode.
- Under Passcode Options, choose 6-Digit Numeric Code or Custom Alphanumeric Code.
- Set up Face ID or Touch ID.
- On the same screen, under Allow Access When Locked, turn off Control Centre, USB Accessories and Return Missed Calls if you don't need them.
- Settings → Display & Brightness → Auto-Lock → 30 seconds or 1 minute.
Turn on automatic updates
Apple often releases security updates that close holes used in real attacks.
- Settings → General → Software Update.
- Tap Automatic Updates.
- Turn on Download iOS Updates, Install iOS Updates and Security Responses & System Files.
- For apps: Settings → App Store → turn on App Updates.
- If your device no longer gets the latest version of iOS, check whether it at least gets security updates; otherwise, plan to replace it.
Protect your Apple Account with two-factor authentication
Even if someone learns your password, they can't sign in without your device.
- Settings → tap your name at the top (Apple Account).
- Choose Sign-In & Security.
- Check that Two-Factor Authentication is On; if not, turn it on.
- Check your trusted phone numbers – delete any you don't recognise.
- Add a Recovery Contact, e.g. a parent.
- Under your name → scroll down to the list of devices and remove any device you don't recognise.
- Never share the six-digit verification code that appears on your screen.
Turn on Find My and Stolen Device Protection
It helps you find your device and stops a thief who has seen your passcode from changing your account.
- Settings → your name → Find My → Find My iPhone (or iPad) → turn it on.
- Also turn on Find My network and Send Last Location.
- Settings → Face ID & Passcode → Stolen Device Protection → turn it on (iPhone only).
- With this on, changing your Apple Account password requires Face ID/Touch ID and sometimes a waiting period when you're away from familiar places.
- Try icloud.com/find once on a computer so you know how it works.
Run Safety Check and review your privacy
It shows who you're sharing your location and photos with, and who has access to your account.
- Settings → Privacy & Security → Safety Check.
- Choose Manage Sharing & Access and check who you're sharing your location and albums with.
- Go back to Privacy & Security and open Location Services, Camera, Microphone, Photos and Contacts one by one.
- For each app, choose Never, Ask Next Time or While Using the App.
- For Photos, choose Limited Access rather than Full Access.
- Under Tracking, turn off Allow Apps to Request to Track.
Store your passwords in the Passwords app
A different password for every account means that if one leaks, it doesn't unlock the others.
- Open the Passwords app – in older versions: Settings → Passwords.
- Check the Security section for weak, reused or leaked passwords.
- Change any passwords marked as at risk.
- Settings → General → AutoFill & Passwords → turn on AutoFill Passwords and Passkeys.
- Use passkeys when a website or app offers them.
Back up to iCloud
If your device is lost or needs to be reset, your data is easy to restore.
- Settings → your name → iCloud → iCloud Backup → turn it on.
- Tap Back Up Now when you're on Wi-Fi.
- Check that you have enough iCloud storage; otherwise, back up to a computer (Finder on a Mac, or the Apple Devices app / iTunes on Windows).
- For stronger protection, adults can turn on Advanced Data Protection in iCloud – but they must have a recovery contact or recovery key.
✅ Do / Don't
✅ Do this
- Use a passcode of 6 digits or longer, plus Face ID/Touch ID.
- Keep automatic updates switched on.
- Turn on two-factor authentication and Stolen Device Protection.
- Only download apps from the App Store and check the age rating.
- Run Safety Check regularly.
- Only give “While Using the App” or “Limited Access” permissions.
- Store your passwords in the Passwords app or a trusted password manager.
- Back up regularly to iCloud or a computer.
❌ Don't do this
- Don't share your device passcode, not even with your best friends.
- Never share your Apple Account verification code – Apple will never ask for it by phone or message.
- Don't install Configuration Profiles from unknown websites or people.
- Don't “jailbreak” your device – it removes Apple's protections.
- Don't open links in messages like “Your iCloud has been locked” or “Pay for your delivery”.
- Don't share your location with people you only know online.
- Don't sign in with your Apple Account on someone else's device.
- Don't accept AirDrop from “Everyone” in public places – set it to Contacts Only.
👨👩👧 Parental controls with Screen Time and Family Sharing
Apple offers Family Sharing and Screen Time for free. Your child needs their own Apple Account as a member of the family.
- On the parent's iPhone: Settings → your name → Family → Add Member → Create Child Account.
- On the child's device (or from the parent's device under Family → the child's name): Settings → Screen Time → turn it on and choose that this is your child's device.
- Set a Screen Time passcode that only the parent knows (different from the device passcode).
- Downtime: e.g. from 21:00 to 07:00.
- App Limits: set a daily time for games or social media.
- Content & Privacy Restrictions: restrict apps by age, web content and App Store purchases (In-app Purchases → Don't Allow).
- Communication Limits: your child can only communicate with approved contacts.
- Communication Safety: warns your child when they receive or send photos containing nudity; it's usually on automatically for children's accounts – check it.
- In Family → Ask to Buy: every download or purchase needs a parent's approval.
Exact names may differ slightly depending on the iOS version. Explain to your child why you're setting these rules, and review them together as they grow older.
⚠️ Warning signs
- You get a notification that someone signed in to your Apple Account from a device or place you don't recognise.
- In Settings → General → VPN & Device Management, there's a profile you didn't install.
- Your Apple Account password has been changed without you knowing.
- App Store purchases appear that you didn't make.
- Your device shows as “lost”, or someone asks you for money to unlock it.
- You get an alert that an unknown AirTag is moving with you.
🆘 If you get hacked
- Step 1: Tell a parent or teacher straight away.
- Step 2: Change your Apple Account password (Settings → your name → Sign-In & Security → Change Password) or at account.apple.com from a safe device.
- Step 3: In the list of devices under your name, remove any unknown devices; check your trusted phone numbers.
- Step 4: Delete unknown profiles in VPN & Device Management and uninstall suspicious apps.
- Step 5: Run Safety Check → Emergency Reset to stop sharing with others immediately.
- Step 6: If the problems continue, back up and reset the device: Settings → General → Transfer or Reset iPhone → Erase All Content and Settings.
- Step 7: For threats, blackmail or financial fraud, keep the evidence and report it to Kosovo Police on 192 (emergency: 112).
More help: Help & Reporting