{"id":29932,"date":"2020-08-28T15:41:32","date_gmt":"2020-08-28T19:41:32","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=29932"},"modified":"2020-08-28T15:46:47","modified_gmt":"2020-08-28T19:46:47","slug":"can-thieves-crack-6-digit-iphone-passcodes","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2020\/08\/28\/can-thieves-crack-6-digit-iphone-passcodes\/","title":{"rendered":"Can Thieves Crack 6-Digit iPhone Passcodes?"},"content":{"rendered":"

Henrique Prange<\/a>:<\/p>\n

So, how could the wrongdoers do all of that in less than 5 hours? After considering many options, the only reasonable explanation is they cracked the 6-digit passcode on the stolen iPhone using some kind of device like the GrayKey.<\/p>\n

The passcode gave them access to the keychain. They searched for the iCloud credentials, disabled the Lost Mode, and turned off the Find My.<\/p><\/blockquote>\n\n

Via John Gruber<\/a>:<\/p>\n

I mention this in the wake of the aforelinked piece on Face ID vs. face masks<\/a> because months ago, when I first started grocery shopping while wearing a mask, I switched my iPhone from an alphanumeric passphrase back to a 6-digit passcode for convenience. I did so thinking, basically, that even though a 6-digit passcode is less secure, anything truly dangerous like disabling Find My iPhone requires my iCloud password as well.<\/p>

It simply never occurred to me that if a thief (or law enforcement, or any adversary) has the device passcode, and your iCloud password is in your keychain, they can get your iCloud password from your keychain. All you need is the device passcode to access all<\/em> of the passwords in iCloud keychain.<\/p><\/blockquote>\n\n

I really hope this year’s iPhones have Touch ID.<\/p>\n\n

Previously:<\/p>\n