The iPhone has been incredibly successful thanks to its simplicity, intuitiveness and good looks. Although initially focused on the consumer market, it has quickly became a favourite of the corporate world who realised they could combine personal and business devices into one, simplifying their digital lifestyle whilst looking stylish as well!
The combination of lifestyle elements such as video (on the 3GS), photos, YouTube and applications such as Facebook, along with business applications, e-mail and search make the iPhone the perfect device for users both at home and work.
Simplicity however does not necessarily mean the iPhone is secure. If you lose your device, not only will you be sick with disappointment, your personal information could also be compromised. Worse still, if you are roaming overseas there is every chance large mobile data bills could be run up that parallel the mortgage on your house. That in itself would make you sick with fear.
With a few simple steps and good common sense you can ensure your information is secure. Go grab your iPhone, a coffee and do these now.
Pin your Phone down
The first thing you should do when you get your iPhone is put a passcode on it. This will prevent anyone who picks up your phone from immediately accessing your applications.
By turning on the Passcode Lock you will be prompted for a four digit pin after the Auto Lock feature locks your phone.
Once you have enabled Passcode lock you will be prompted as to whether you wish enter this immediately or after a few minutes. Obviously the shorter the time the more secure this will be. Use your head and don’t use a simple pin code like 1234 or your birthdate or year!
There is also an Erase Data option which can be turned on. This will erase all data on the iPhone after 10 failed Passcode attempts which is fantastic if you leave your iPhone in a taxi, airport or bar as all your information will be erased! However...it doesn’t get your phone back.
Leave Wi-Fi turned off unless required
Wi-Fi is used to connect to networks, whether they are your corporate network or the Internet. We recommend manually turning on Wi-Fi when you require it as it will reduce the risk of connecting to unsecure wireless networks without your knowledge. It will also save some valuable battery power!
Different Security algorithms can be selected included WEP, WPA, WPA2, WPA Enterprise and WPA2 Enterprise. Each of these offer different levels of security, and you should use the most secured model you can.
It is recommended WEP is no longer used due to its weak security model, and you should migrate to at least WPA2. WPA Enterprise or WPA2 Enterprise is used in conjunction with RADIUS servers for authentication using either AES or TKIP encryption.
If connecting to your Corporate network over either Wi-Fi or 3G networks we do recommend you use a VPN tunnel to encrypt the traffic going over it.
Turn off Bluetooth
One of the most appealing features of the iPhone is its simplicity. However, simplicity is not necessarily secure, and Bluetooth is another example of a feature that makes our lives easy but can potentially be a vector for attack as well.
Bluetooth can be used for sharing information and also for the use of car headsets.
If you are not using Bluetooth, turn it off.
Use SSL for Mail
SSL or Secure Sockets Layer is a security standard for securing the transmission of data between two endpoints.
You should ensure that your mail servers are using SSL to ensure your e-mail content is not transmitted in plain text over the Internet.
Keep Internet Tethering Off
Internet tethering is a fantastic function of the iPhone. It saves on mobile data connections as you can use your iPhone as a modem in place of your 3G data card or USB stick.
BUT - If you have Internet Tethering turned on and you lose your iPhone anyone who finds your iPhone can still use your data connection EVEN if you have a Passcode lock. This could be very costly for you, particularly if you are roaming overseas when you lose your phone. You may as well not bother coming home because it’s going to cost you a fortune in mobile bills when you do.
So, once you have finished with your Internet tethering, make sure you turn it off immediately. Be safe!
Now you see it, now you don’t!
This is a simple, common sense process you must follow if you lose your iPhone.
If you have Microsoft Exchange as your e-mail configured, the first thing you should do is access your Outlook Web Access and go to Options and Mobile Devices.
Choose Wipe All Data from Device. If your device is online, Microsoft Exchange will begin a remote wipe.
If you physically have the device you can erase it the content as well and you may want to do this if you need to send your iPhone in for repair. You don’t want any nosey technicians having a look through your photos or contact list.
If you have a subscription to MobileMe, you should turn on Find My iPhone. If you subsequently lose the device, you can log into your MobileMe account from a web browser, choose the account tab and select the Find My iPhone icon.
If your iPhone is currently on the network, a blue circle will display it’s estimated location.
Find My iPhone will also let you display a message on the screen and make a sound even if the iPhone screen is locked or the sound is off.
Choose the Remote Wipe option if you suspect your iPhone has been stolen. It will then begin wiping all the content on your device. As everything is backed up to iTunes, if you should then find it, by re-tethering all your content will be pushed back to the iPhone.
Keep up to Date
Finally, one of the most simplest and effective methods of remaining secure is to ensure you keep the Operating System version current. This can be checked and updated whenever you tether to iTunes.
Comments