Skip to content

iOS

Prerequisites

  • Install a Password Manager
    • To store a unique, strong password for the phone that is also easy to enter.
  • Install FOI Security Policy
    • The profile will configure the main part of the security settings and its installation is necessary before following the instructions on this page.

Make sure your device receives updates!

Operating system updates are critically important.

If you are not using the latest version of your operating system, your device is not considered secure!

Make sure your device receives updates and is running the latest version.

If your device no longer receives updates, it must be replaced!

System configuration

On iOS, all settings are configured by installing FOI Security Policy.

For encrypting data stored on iCloud, you can use the macOS instructions.

Password

By default, we use 6-digit passwords on the device. The reason is that iPhones have additional security mechanisms beyond passwords. Software and hardware restrictions reduce the speed of Brute-force (trying all possible combinations) to a level where trying all combinations could potentially take years.

iOS has a setting where entering the password incorrectly 11 times causes the data on the device to be erased. However, these are only software and hardware restrictions that may have vulnerabilities, allowing an attacker unlimited attempts.

The Entropy (password strength) of a 6-digit password is only 15 bits. If there is a software or hardware flaw in the device, such a password could be cracked in less than a second.

After installing FOI Security Policy, if you were using a 6-digit password, the system will automatically prompt you to set a new password.

Go to the FOI Security Policy page and follow the instructions.

DNS

FOI Security Policy will add two Encrypted DNS servers to the device — Cloudflare and Adguard.

Visit the DNS page, choose the server you prefer and activate it through:

Apple Settings System Settings > VPN & Device Management > DNS

VPN

Visit the VPN page, install the VPN provider's application and connect to a server.

Help