Garry Tan’s Post

Apple sherlocked 1Password today, so I'd like to remind you that your Apple ID is only as secure as your phone carrier. If you have 2FA on and get SIM swapped, attackers can lock you out of your iCloud account - PERMANENTLY. Last month, it happened to me. Make sure it doesn't happen to you: In February, my T-Mobile SIM was swapped for the first time. I recovered my number the same day and added SIM protection with a pin code to prevent future occurrences. I mention this only so that you know that a PIN code doesn't protect you from SIM swapping. Last month, I was on a FaceTime call when suddenly the call dropped, and I was asked to reauthorize iCloud on all my devices. I also noticed my iPhone had lost all reception - so I immediately knew what happened - I somehow got SIM swapped again, despite adding a PIN. In my inbox was an email from Apple telling me my Apple ID was password reset, my trusted phone number was removed, and a new number was added ending in 24, which I don't recognize. I immediately called T-Mobile and recovered my phone number. According to their systems, this change happened at the Stanford Apple store by an employee with an ID of R099. It's important to note that I did not visit this store all year - this was an inside job. I've escalated this as high as it goes at Apple (VP level) and was told that without knowing what the new trusted number is, they are cryptographically locked out. There is nothing they can do even if they wanted to. I am far from alone in getting hosed like this: https://lnkd.in/gBjZ5w5V. Luckily, all of our passwords were in 1Password, my work accounts are considerably more locked down, and we had backups of everything (including 20 years of photos). But having to remove activation lock and manually set up all of our Apple devices again was a pain in the ass. The best way to protect yourself is to NOT use any carrier numbers for 2FA: even with SIM code protection, you can still get SIM swapped. Instead, sign up for a Google Voice number. So my point is - I would think hard before trusting Apple or iCloud with any of your passwords. Apple is aware of the vulnerability and is working on things, but apparently, any fixes won't be retroactive. I think 1Password will be fine.

"Apple sherlocked 1Password today, so I'd like to remind you that your Apple ID is only as secure as your phone carrier." Wild cybersecurity story involving SIM swapping, Apple account takeover, and risks associated with using your primary carrier for MFA. A nice reminder that backups across multiple systems (e.g., photos in iCloud and Google Photos, files in Drive and Dropbox), non-carrier VoIP for MFA, and a password manager like 1Password are super important for consumers too. #Cybersecurity isn't just for business and enterprise.

A worrying Apple Bug is inexplicably signing users out of their Apple ID accounts and then not letting them back in with the right passwords! Many are having to reset passwords amid the widespread lockout issue. Read our latest for more insight on how to prevent this! #AppleBug #LAPost #AppleNews #TechGlitch https://bit.ly/3QsiI3f

Set this up to avoid being permanently locked out! If you own an iPhone and are prone to forgetting login details and passwords, then perhaps you should consider setting up a Recovery Contact.  They can assist you with accessing your Apple account if you are in the unfortunate position of being locked out. A recovery contact is someone who can verify your identity and help you regain access to your account if you have forgotten your Apple ID password or have been locked out.  They should be a person you know and trust, such as a family member or close friend.  You can select up to five recovery contacts, and if you’re in a Family Sharing group, the members of this group will be automatically recommended. To set up a recovery contact, your device must be running iOS 15 or later and you need to have two-factor authentication turned on for your iCloud account.  Your recovery contact must also have a compatible device running at iOS 15 or later, and they must be over the age of 13.  They won’t have access to your account, only the ability to give you a code if you need one. How to set up an Account Recovery Contact On your iPhone: Go to Settings >  Tap your name > Sign-In & Security > Account Recovery > Add Recovery Contact > Tap Add Recovery Contact again (on the pop up) Be aware that if any of your connected devices are not on iOS 15 or above (or not capable of being because they are old models) these will be flagged up. If you’re in a family sharing group, the members of the group will be recommended on the Add Recovery Contact screen, so you can select someone from that list, or you can tap ‘Choose Someone Else’  If you select a family member they’ll be added automatically, however if you choose a contact, they will have to accept the request.  You will be notified once they have accepted the request, and likewise if they decline the request, then you’ll have to select someone else. How to get a recovery code from your recovery contact If you forget your Apple ID password and are locked out, you will have to identify some of your Apple ID account information before contacting your Recovery Contact. Your Recovery Contact will need to follow these steps: Go to Settings > Tap Name > Password & Security > Account Recovery Then they will need to select your name from the list (if they are the Recovery Contact for more than one person), and then tap Get Recovery Code, which should give them a six-digit code, which they can then pass on to you.  You can enter it into your device and you should be able to reset your password and regain access. It is a really good idea to check that you know what your Apple ID is and save it in a safe secure place.  You can test logging in at www.icloud.com

Set this up to avoid being permanently locked out! If you own an iPhone and are prone to forgetting login details and passwords, then perhaps you should consider setting up a Recovery Contact.  They can assist you with accessing your Apple account if you are in the unfortunate position of being locked out. A recovery contact is someone who can verify your identity and help you regain access to your account if you have forgotten your Apple ID password or have been locked out.  They should be a person you know and trust, such as a family member or close friend.  You can select up to five recovery contacts, and if you’re in a Family Sharing group, the members of this group will be automatically recommended. To set up a recovery contact, your device must be running iOS 15 or later and you need to have two-factor authentication turned on for your iCloud account.  Your recovery contact must also have a compatible device running at iOS 15 or later, and they must be over the age of 13.  They won’t have access to your account, only the ability to give you a code if you need one. How to set up an Account Recovery Contact On your iPhone: Go to Settings >  Tap your name > Sign-In & Security > Account Recovery > Add Recovery Contact > Tap Add Recovery Contact again (on the pop up) Be aware that if any of your connected devices are not on iOS 15 or above (or not capable of being because they are old models) these will be flagged up. If you’re in a family sharing group, the members of the group will be recommended on the Add Recovery Contact screen, so you can select someone from that list, or you can tap ‘Choose Someone Else’  If you select a family member they’ll be added automatically, however if you choose a contact, they will have to accept the request.  You will be notified once they have accepted the request, and likewise if they decline the request, then you’ll have to select someone else. How to get a recovery code from your recovery contact If you forget your Apple ID password and are locked out, you will have to identify some of your Apple ID account information before contacting your Recovery Contact. Your Recovery Contact will need to follow these steps: Go to Settings > Tap Name > Password & Security > Account Recovery Then they will need to select your name from the list (if they are the Recovery Contact for more than one person), and then tap Get Recovery Code, which should give them a six-digit code, which they can then pass on to you.  You can enter it into your device and you should be able to reset your password and regain access. It is a really good idea to check that you know what your Apple ID is and save it in a safe secure place.  You can test logging in at www.icloud.com

Set this up to avoid being permanently locked out! If you own an iPhone and are prone to forgetting login details and passwords, then perhaps you should consider setting up a Recovery Contact.  They can assist you with accessing your Apple account if you are in the unfortunate position of being locked out. A recovery contact is someone who can verify your identity and help you regain access to your account if you have forgotten your Apple ID password or have been locked out.  They should be a person you know and trust, such as a family member or close friend.  You can select up to five recovery contacts, and if you’re in a Family Sharing group, the members of this group will be automatically recommended. To set up a recovery contact, your device must be running iOS 15 or later and you need to have two-factor authentication turned on for your iCloud account.  Your recovery contact must also have a compatible device running at iOS 15 or later, and they must be over the age of 13.  They won’t have access to your account, only the ability to give you a code if you need one. How to set up an Account Recovery Contact On your iPhone: Go to Settings >  Tap your name > Sign-In & Security > Account Recovery > Add Recovery Contact > Tap Add Recovery Contact again (on the pop up) Be aware that if any of your connected devices are not on iOS 15 or above (or not capable of being because they are old models) these will be flagged up. If you’re in a family sharing group, the members of the group will be recommended on the Add Recovery Contact screen, so you can select someone from that list, or you can tap ‘Choose Someone Else’  If you select a family member they’ll be added automatically, however if you choose a contact, they will have to accept the request.  You will be notified once they have accepted the request, and likewise if they decline the request, then you’ll have to select someone else. How to get a recovery code from your recovery contact If you forget your Apple ID password and are locked out, you will have to identify some of your Apple ID account information before contacting your Recovery Contact. Your Recovery Contact will need to follow these steps: Go to Settings > Tap Name > Password & Security > Account Recovery Then they will need to select your name from the list (if they are the Recovery Contact for more than one person), and then tap Get Recovery Code, which should give them a six-digit code, which they can then pass on to you.  You can enter it into your device and you should be able to reset your password and regain access. It is a really good idea to check that you know what your Apple ID is and save it in a safe secure place.  You can test logging in at www.icloud.com

Set this up to avoid being permanently locked out! If you own an iPhone and are prone to forgetting login details and passwords, then perhaps you should consider setting up a Recovery Contact.  They can assist you with accessing your Apple account if you are in the unfortunate position of being locked out. A recovery contact is someone who can verify your identity and help you regain access to your account if you have forgotten your Apple ID password or have been locked out.  They should be a person you know and trust, such as a family member or close friend.  You can select up to five recovery contacts, and if you’re in a Family Sharing group, the members of this group will be automatically recommended. To set up a recovery contact, your device must be running iOS 15 or later and you need to have two-factor authentication turned on for your iCloud account.  Your recovery contact must also have a compatible device running at iOS 15 or later, and they must be over the age of 13.  They won’t have access to your account, only the ability to give you a code if you need one. How to set up an Account Recovery Contact On your iPhone: Go to Settings >  Tap your name > Sign-In & Security > Account Recovery > Add Recovery Contact > Tap Add Recovery Contact again (on the pop up) Be aware that if any of your connected devices are not on iOS 15 or above (or not capable of being because they are old models) these will be flagged up. If you’re in a family sharing group, the members of the group will be recommended on the Add Recovery Contact screen, so you can select someone from that list, or you can tap ‘Choose Someone Else’  If you select a family member they’ll be added automatically, however if you choose a contact, they will have to accept the request.  You will be notified once they have accepted the request, and likewise if they decline the request, then you’ll have to select someone else. How to get a recovery code from your recovery contact If you forget your Apple ID password and are locked out, you will have to identify some of your Apple ID account information before contacting your Recovery Contact. Your Recovery Contact will need to follow these steps: Go to Settings > Tap Name > Password & Security > Account Recovery Then they will need to select your name from the list (if they are the Recovery Contact for more than one person), and then tap Get Recovery Code, which should give them a six-digit code, which they can then pass on to you.  You can enter it into your device and you should be able to reset your password and regain access. It is a really good idea to check that you know what your Apple ID is and save it in a safe secure place.  You can test logging in at www.icloud.com

Set this up to avoid being permanently locked out! If you own an iPhone and are prone to forgetting login details and passwords, then perhaps you should consider setting up a Recovery Contact.  They can assist you with accessing your Apple account if you are in the unfortunate position of being locked out. A recovery contact is someone who can verify your identity and help you regain access to your account if you have forgotten your Apple ID password or have been locked out.  They should be a person you know and trust, such as a family member or close friend.  You can select up to five recovery contacts, and if you’re in a Family Sharing group, the members of this group will be automatically recommended. To set up a recovery contact, your device must be running iOS 15 or later and you need to have two-factor authentication turned on for your iCloud account.  Your recovery contact must also have a compatible device running at iOS 15 or later, and they must be over the age of 13.  They won’t have access to your account, only the ability to give you a code if you need one. How to set up an Account Recovery Contact On your iPhone: Go to Settings >  Tap your name > Sign-In & Security > Account Recovery > Add Recovery Contact > Tap Add Recovery Contact again (on the pop up) Be aware that if any of your connected devices are not on iOS 15 or above (or not capable of being because they are old models) these will be flagged up. If you’re in a family sharing group, the members of the group will be recommended on the Add Recovery Contact screen, so you can select someone from that list, or you can tap ‘Choose Someone Else’  If you select a family member they’ll be added automatically, however if you choose a contact, they will have to accept the request.  You will be notified once they have accepted the request, and likewise if they decline the request, then you’ll have to select someone else. How to get a recovery code from your recovery contact If you forget your Apple ID password and are locked out, you will have to identify some of your Apple ID account information before contacting your Recovery Contact. Your Recovery Contact will need to follow these steps: Go to Settings > Tap Name > Password & Security > Account Recovery Then they will need to select your name from the list (if they are the Recovery Contact for more than one person), and then tap Get Recovery Code, which should give them a six-digit code, which they can then pass on to you.  You can enter it into your device and you should be able to reset your password and regain access. It is a really good idea to check that you know what your Apple ID is and save it in a safe secure place.  You can test logging in at www.icloud.com

Set this up to avoid being permanently locked out! If you own an iPhone and are prone to forgetting login details and passwords, then perhaps you should consider setting up a Recovery Contact.  They can assist you with accessing your Apple account if you are in the unfortunate position of being locked out. A recovery contact is someone who can verify your identity and help you regain access to your account if you have forgotten your Apple ID password or have been locked out.  They should be a person you know and trust, such as a family member or close friend.  You can select up to five recovery contacts, and if you’re in a Family Sharing group, the members of this group will be automatically recommended. To set up a recovery contact, your device must be running iOS 15 or later and you need to have two-factor authentication turned on for your iCloud account.  Your recovery contact must also have a compatible device running at iOS 15 or later, and they must be over the age of 13.  They won’t have access to your account, only the ability to give you a code if you need one. How to set up an Account Recovery Contact On your iPhone: Go to Settings >  Tap your name > Sign-In & Security > Account Recovery > Add Recovery Contact > Tap Add Recovery Contact again (on the pop up) Be aware that if any of your connected devices are not on iOS 15 or above (or not capable of being because they are old models) these will be flagged up. If you’re in a family sharing group, the members of the group will be recommended on the Add Recovery Contact screen, so you can select someone from that list, or you can tap ‘Choose Someone Else’  If you select a family member they’ll be added automatically, however if you choose a contact, they will have to accept the request.  You will be notified once they have accepted the request, and likewise if they decline the request, then you’ll have to select someone else. How to get a recovery code from your recovery contact If you forget your Apple ID password and are locked out, you will have to identify some of your Apple ID account information before contacting your Recovery Contact. Your Recovery Contact will need to follow these steps: Go to Settings > Tap Name > Password & Security > Account Recovery Then they will need to select your name from the list (if they are the Recovery Contact for more than one person), and then tap Get Recovery Code, which should give them a six-digit code, which they can then pass on to you.  You can enter it into your device and you should be able to reset your password and regain access. It is a really good idea to check that you know what your Apple ID is and save it in a safe secure place.  You can test logging in at www.icloud.com

🔒🍎 Exciting news, fellow IT wizards and cybersecurity warriors! 🌐✨ 🔍 Hear ye, hear ye! Apple is rumored to drop their very own password manager, aptly named 'Passwords,' at the upcoming WWDC. 🚀💻 Say goodbye to endless post-it notes and 123456 nightmares - Apple's got our back! 🙌🍏 🔐 Passwords? More like life-savers! With iOS 18, iPadOS 18, and macOS 15 on the horizon, our digital keys will be in good hands. 🗝️👌 No more password panic - just smooth sailing through the tech storm! ⛈️🚢 📈 Bet your bitcoins this move will send ripples through our cyber kingdom! 🌊👑 A standalone password manager from Apple can only mean one thing - game-changer approaching! 🎮💥 🧠 Let's put our IT hats on and predict the ruckus 'Passwords' will stir up in the security realm: 🔮 - 🔒 Enhanced protection against cyber baddies - 💨 Swift access to all your secret passcodes - 🚀 Seamless integration with Apple's ecosystem - 🤖 AI-powered wizardry guarding our digital fortresses ⚡️ Brace yourselves, tech aficionados! The future of password security is knocking on our firewalled doors. 🚪💬 Let's dive into this fresh scoop at the WWDC and see what magic Apple has up its sleeve! 🎩🍏 #ainews #automatorsolutions #TechMagic #ApplePasswords #WWDC2023 #CyberGuardians 👇 Are you ready to embrace 'Passwords' with open arms? Share your thoughts, reactions, and predictions below! 💬🔒🔍 #CyberSecurityAINews ----- Original Publish Date: 2024-06-07 12:53