Securing the Tech: iPhone Password Requests
It has been a while since I have used an iOS device regularly. One thing I do remember were frequent requests for the password of the Apple ID of the device.
I have read a number of articles talking about apps that fake the password request window. Instead of entering your Apple ID and password into a window controlled by iOS you are handing your password to the developer of this app for them to do who knows what with it.
iOS has a simple mechanism that can be used to verify these windows: the home button. When you press the home button in an app you, unsurprisingly, are taken to the home screen. Apps can't prevent this behavior. However, the home button doesn't get around legitimate password request from iOS.
So, when you are asked for your password simply press the home button. If you are taken to the home screen then the app was asking for your password. If nothing happens then it is actually iOS asking for your password and not the app. Just a good FYI for my friends that are using iOS.
I have read a number of articles talking about apps that fake the password request window. Instead of entering your Apple ID and password into a window controlled by iOS you are handing your password to the developer of this app for them to do who knows what with it.
iOS has a simple mechanism that can be used to verify these windows: the home button. When you press the home button in an app you, unsurprisingly, are taken to the home screen. Apps can't prevent this behavior. However, the home button doesn't get around legitimate password request from iOS.
So, when you are asked for your password simply press the home button. If you are taken to the home screen then the app was asking for your password. If nothing happens then it is actually iOS asking for your password and not the app. Just a good FYI for my friends that are using iOS.
Comments