Note (October 2026): An earlier version of this guide gave the iCloud Backup path as the way to turn on Erase Data, and described settings that iOS has since renamed or removed. The steps now use Apple’s current menu names, including the separate Erase Data switch under Face ID & Passcode.
To enhance iPhone security, keep iOS updated, use a six-digit or longer passcode with Face ID or Touch ID, turn on Stolen Device Protection, limit location, camera and microphone access to the apps that need it, turn off Personalized Ads and app tracking requests, and keep accessories blocked while the iPhone is locked. Apple lists most of these controls under Settings > Privacy & Security and Settings > Face ID & Passcode.
Key Takeaways
- Menu names have changed: on current iOS versions the Privacy menu is called Privacy & Security, and Safari settings sit under Settings > Apps > Safari.
- Stolen Device Protection (iOS 17.3 or later) requires Face ID or Touch ID, and an hour-long security delay for some changes, when the iPhone is away from familiar locations.
- Erase Data wipes the iPhone after 10 failed passcode attempts; it lives under Face ID & Passcode, not iCloud Backup.
- Ad and tracking controls: turn off Personalized Ads under Apple Advertising and Allow Apps to Request to Track under Tracking.
- Back up first: iCloud backs up an iPhone daily when it is on power, locked and on Wi-Fi.
Smartphones have become an extension of our personal lives. Because of this, they can contain a lot of sensitive and personal data. Therefore, you want to enhance your iPhone’s security as much as possible.
Apple builds many privacy and security controls into iOS, and some of them, such as Prevent Cross-Site Tracking in Safari, are on by default. Others, such as Erase Data and Lockdown Mode, stay off until the owner turns them on, so it is worth knowing where each setting lives.
The settings below are listed with their menu paths. Menu names change between iOS releases: on current versions of iOS the Privacy menu is called Privacy & Security (earlier versions call it Privacy), so read “Privacy” in the paths below as “Privacy & Security” on a recent iPhone.
Some users also add one of the best iPhone VPNs on public Wi-Fi, but the most important step is enabling the device’s built-in security settings below.
Privacy Settings
1] Limit and/or Turn Off Location Tracking.
For one, you want to limit and or completely turn off location tracking for the apps that are not deemed essential. While you will need location tracking on at all times for things like a navigation app or an app that locates your iPhone, you don’t need it for other types of apps that commonly request your location.
Even if you want to have a location on enabled on various apps, you don’t have to have it engaged at all times. By having your location shared with these apps at all times, you are simply oversharing information which infringes on your privacy.
To locate these settings, go to Settings > Privacy > Location Services and check to see which apps currently have access to your location. Simply scroll through and check each app. Tap an app to choose Never, Ask Next Time Or When I Share, While Using the App or Always. Since iOS 14, you can also turn off Precise Location for an app so it receives only your approximate location, which Apple says may be sufficient for an app that does not need your exact location.
2] Limit Access To Your Microphone and Camera.
Another major area where you want to limit usage would be with your microphone and your camera. When you install an app and run it for the first time, you are likely to be prompted with this type of message if they are looking to use it.
There are specific apps that you will want to grant this type of access to and then there are apps that wouldn’t ever need these permissions enabled in the first place. With most apps, turning these permissions off is not going to break the functionality of the app itself.
Therefore, you want to turn this off for as many apps as possible. Only enable this for apps that have features that require the use and that you trust.
To locate these settings, go to Settings > Privacy > Camera and Settings > Privacy > Microphone. Here, you will be able to switch the access to either “on” or “off” for each app that requests this permission.
3] Preventing Advertisers From Targeting You.
Like other companies, Apple has a targeted ad platform which is designed to serve targeted ads based on all of the information that you give them. This includes a lot of your personal information.
Luckily, you can opt-out of getting this information shared and from getting targeted ads. While you won’t see fewer ads as a result, you will not see as many relevant and targeted ads directly meant for you.
To locate these settings, go to Settings > Privacy > Advertising. On current versions of iOS this menu is called Apple Advertising (Settings > Privacy & Security > Apple Advertising), and the switch to turn off is Personalized Ads; older iOS versions labeled the control Limit Ad Tracking. You will also be able to limit Apple’s ability to send you Geo-specific ads.
To do this, simply go to Settings > Privacy > Location Services > System Services and turn “Location-Based Apple Ads” to “Off.” Apple’s current support guidance also says location-based ads can be blocked by opening Location Services and setting Allow Location Access to Never for the App Store and News apps.
4] Cross-Site Tracking.
If you are someone that doesn’t want to have sites constantly tracking you and serving you ads based on your browsing history, you will want to turn this setting off.
You can minimize the occurrence of this by going over to Settings > Safari (Settings > Apps > Safari on current iOS versions) and making sure “Prevent Cross-Site Tracking” is on; Apple says Safari limits third-party cookies and data by default. The older “Ask Websites Not To Track Me” switch no longer exists: Apple removed the Do Not Track setting in Safari 12.1, which shipped with iOS 12.2 in 2019, because few websites honored it and the request itself could be used to fingerprint browsers. Safari’s Hide IP Address option hides your IP address from known trackers.
5] Reduce Sensitive Information From Displaying On Your Lock Screen.
A locked iPhone can still make some features, such as Notification Center, Control Center, Siri and Wallet, available on its Lock Screen. Unfortunately, the more information you share, the more you put yourself at risk. If you are looking to protect yourself from getting your iPhone stolen and having your information used against you, it might be wise to turn off sensitive data from displaying on your lock screen prior to being unlocked.
To locate this setting, go to Settings > Face ID and Passcode. Under “Allow Access When Locked,” turn off the features you do not want available without unlocking. Apple notes that turning a feature off stops someone holding your iPhone from viewing personal information it might show, but you also lose quick access to it yourself.
6] USB Connection Security.
If you are someone that plugs your iPhone into public or potentially harmful USB ports, you might want to restrict USB access to better protect your phone from being targeted. You can do this by enabling USB Restricted Mode which stops the Lightning or USB-C port from communicating with accessories and computers until the iPhone is unlocked. According to Apple, the phone still charges as usual from a USB power adapter.
This reduces, but does not eliminate, the risk of data being pulled from a locked phone through its port. It will also better protect your device from being hacked if you lose it or it gets stolen.
To turn on this setting, simply go to Settings > Face ID & Passcode and enter your passcode on older iOS versions. On current versions, Apple lists the control under Settings > Privacy & Security > Wired Accessories: the default, Automatically Allow When Unlocked, already blocks accessories while the phone is locked, and iPhones with a USB-C connector can also be set to Always Ask or Ask for New Accessories. On older versions, keep the Accessories switch under Allow Access When Locked turned off. Apple says it is off by default and that allowing USB connections while the iPhone is locked disables an important security feature.
7] Turn On Erase Data After a Certain Number Of Failed Passcode Attempts.
For stronger protection, the Erase Data option automatically erases the iPhone after 10 failed passcode attempts, which matters if the phone is stolen. This can help to secure your data from a potential brute force hacking attempt.
That being said, don’t turn this on if you have smaller children that you fear might attempt to unlock your phone a bunch of times. As long as you have an automatic backup turned on, you won’t have to worry about losing everything on your phone.
Before turning Erase Data on, make sure automatic backup is on: go to Settings > Apple ID > iCloud > iCloud Backup and turn on Back Up This iPhone (on current iOS versions the path starts with Settings > your name > iCloud). The Erase Data switch itself is separate: go to Settings > Face ID & Passcode (or Touch ID & Passcode on an iPhone with a Home button), scroll to the bottom and turn on Erase Data. According to Apple, iCloud backs up the iPhone automatically once a day when it is connected to power, locked and connected to Wi-Fi, so a phone erased after failed attempts can be restored from its latest backup. Apple also notes that consecutive attempts of the same wrong passcode do not count toward the limit.
More iPhone Security Settings Worth Turning On
The privacy settings above limit what apps and advertisers learn about you. The settings below protect the iPhone and the Apple Account themselves, which matters most if the phone is lost or stolen.
8] Turn On Stolen Device Protection
Stolen Device Protection is an iOS feature, available in iOS 17.3 or later, that adds extra checks when the iPhone is away from familiar locations such as home or work. According to Apple, it is designed for the case where a thief has both the phone and its passcode.
- Biometric check: actions such as using saved passwords or passkeys and payment methods saved in Safari require Face ID or Touch ID, with no passcode fallback.
- Security delay: changes such as a new Apple Account password require Face ID or Touch ID, a one-hour wait, and a second Face ID or Touch ID check.
- Requirements: two-factor authentication on the Apple Account, a device passcode, Face ID or Touch ID, Significant Locations and Find My.
To check it, go to Settings > Face ID & Passcode, enter the passcode and tap Stolen Device Protection. Apple says the feature might already be on by default and must be turned on before the device is lost or stolen. You can also set Require Security Delay to Always so the extra checks apply even at home.
9] Use a Stronger Passcode
Apple’s default iPhone passcode is six digits. When setting or changing the passcode under Settings > Face ID & Passcode, tap Passcode Options to choose a custom numeric code or a custom alphanumeric code instead, which is harder to guess than a four-digit code. For other accounts, a secure password generator can create long random passwords.
10] Stop Apps From Asking to Track You
App Tracking Transparency has required apps to ask permission before tracking you across other companies’ apps and websites since iOS 14.5. To stop all apps from asking, go to Settings > Privacy & Security > Tracking and turn off Allow Apps to Request to Track. The same screen lists apps you previously allowed, so you can switch them off one by one.
11] Run Safety Check
Safety Check, available on iPhones with iOS 16 or later, lets you review and stop sharing your information with individual people and apps. Go to Settings > Privacy & Security > Safety Check. Emergency Reset immediately stops sharing with all people and apps, while Manage Sharing & Access lets you review sharing one person or app at a time, check which devices are signed in to your Apple Account, and change your passcode or Apple Account password.
12] Consider Advanced Data Protection for iCloud
Advanced Data Protection extends end-to-end encryption to most iCloud data, including iCloud Backup, Photos and Notes, so the data can be decrypted only on your trusted devices. Apple says this brings the number of end-to-end encrypted data categories to 25. It needs iOS 16.2 or later on the iPhone, two-factor authentication and at least one recovery method, such as a recovery contact or a 28-character recovery key. Turn it on under Settings > your name > iCloud > Advanced Data Protection. Because Apple cannot recover this data for you, keep the recovery key somewhere safe.
13] Know When to Use Lockdown Mode
Lockdown Mode is an optional, extreme protection that Apple designed for the very few people who might be targeted by sophisticated threats such as mercenary spyware; most users never face that kind of attack. When on, it blocks most message attachment types and some complex web technologies, and blocks FaceTime calls from people you have not called in the past 30 days. It is available in iOS 16 or later under Settings > Privacy & Security > Lockdown Mode.
14] Keep iOS Updated
Apple calls keeping software up to date one of the most important things you can do for a device’s security. To check, go to Settings > General > Software Update; the screen shows the installed version and whether an update is available, and you can turn on automatic updates there. As of October 2026, the newest major release is iOS 27, released on September 14, 2026.
iPhone Security Settings at a Glance
| Setting | Where to find it (current iOS) | What it protects against |
|---|---|---|
| Location Services and Precise Location | Privacy & Security > Location Services | Apps collecting your exact location |
| Camera and Microphone | Privacy & Security > Camera / Microphone | Apps recording without a real need |
| Personalized Ads | Privacy & Security > Apple Advertising | Ads targeted with your account data |
| Allow Apps to Request to Track | Privacy & Security > Tracking | Cross-app tracking by other companies |
| Prevent Cross-Site Tracking | Apps > Safari | Third-party cookies following you across sites |
| Allow Access When Locked | Face ID & Passcode | Personal information shown on the Lock Screen |
| Wired Accessories | Privacy & Security > Wired Accessories | Data access through the port of a locked phone |
| Stolen Device Protection | Face ID & Passcode | A thief who knows your passcode |
| Erase Data | Face ID & Passcode (bottom) | Repeated passcode guessing |
| Advanced Data Protection | your name > iCloud | Exposure of iCloud data in a cloud breach |
For related guides, see how to unlock a disabled iPhone without iTunes, how to turn off restrictions enabled on an iPhone, the guide to using free VPNs safely, and how safe your data is online.
Frequently Asked Questions
What is the most important iPhone security setting?
The most important iPhone security protection is a strong passcode combined with Face ID or Touch ID, because most other protections depend on it. After that, Apple’s Stolen Device Protection, available in iOS 17.3 or later, adds Face ID or Touch ID checks and a security delay for critical changes when the phone is away from familiar locations.
Where did the Privacy menu go on iPhone?
On current versions of iOS, the Privacy menu is called Privacy & Security. Location Services, Tracking, Apple Advertising, Safety Check, Wired Accessories and Lockdown Mode are all inside Settings > Privacy & Security.
Does Erase Data delete everything after 10 wrong passcodes?
Yes. With Erase Data on, the iPhone erases all information, media and personal settings after 10 consecutive failed passcode attempts. Apple says repeated attempts of the same wrong passcode do not count toward the limit, and without the option the device must be restored on a computer after 10 failed attempts.
Does turning off Personalized Ads mean fewer ads?
No. According to Apple, turning off Personalized Ads limits Apple’s use of your information to make ads relevant on the App Store, Apple News and Stocks, but it may not reduce the number of ads you see.
Should every iPhone user turn on Lockdown Mode?
No. Apple describes Lockdown Mode as an optional, extreme protection for the very few people who might be personally targeted by sophisticated threats such as mercenary spyware. It blocks many attachments and web technologies, so most users are better served by the standard settings in this guide.
Justwebworld has published guides since 2012. How we write and update articles Report an error
