Critical Security Flaw: Mobile Data Should Not Be Disabled on Locked iPhones

Question

Level 1

6 points

Critical Security Flaw: Mobile Data Should Not Be Disabled on Locked iPhones

Today, my iPhone was stolen, but I was able to locate it through my iPad, thanks to the ‘Find My’ feature. However, I realized a critical flaw in iPhone security: If the thief had turned off the mobile data while the phone was locked, I would have lost the ability to track it.

Currently, iPhone users can disable mobile data even when the device is locked, which could make it impossible to track a stolen or lost iPhone.

I am suggesting that Apple implement a security feature where mobile data cannot be turned off unless the device is unlocked with a passcode, Face ID, or Touch ID. This feature would significantly improve the chances of recovering a lost or stolen iPhone and would be a major security enhancement for all users.

iPhone 12 Pro Max, iOS 18

Posted on Apr 26, 2025 2:06 PM

Reply

Answer 1

Top-ranking reply

Servant of Cats

Level 7

34,409 points

Apr 26, 2025 7:48 PM in response to MaysSoumaa

MaysSoumaa wrote:

Today, my iPhone was stolen, but I was able to locate it through my iPad, thanks to the ‘Find My’ feature. However, I realized a critical flaw in iPhone security: If the thief had turned off the mobile data while the phone was locked, I would have lost the ability to track it.

Turning off the ability to access Control Center from the Lock Screen (which you can already do) might foil a few thieves. (See: Turn on Lock Screen features on iPhone - Apple Support).

However, many thieves are fond of

Immediately switching off a stolen phone, or
Placing a stolen phone in a special type of bag which interferes with all radio transmission and reception (cellular, Wi-Fi, and Bluetooth)

Either of those will cut off the phone's ability to report its location via the main Find My mechanism. If the thief places the phone in a bag that blocks radio transmissions, that will even block the possibility that another Apple device will hear a Bluetooth beacon from a switched-off, stolen phone (Find My Network).

By the time you see a location again, the phone may be far away from where it was stolen.

Reply

Answer 2

Apr 26, 2025 3:05 PM in response to MaysSoumaa

Hey there! You can disable access to Mobile Data by locking access to the Control Centre when iPhone is locked. To do so, open Settings, navigate to Face ID & Passcode, and scroll down: you will find a switch to turn off access to Control Center when the iPhone is locked.

Reply

Answer 3

MaysSoumaa Author

Level 1

6 points

Apr 27, 2025 2:35 AM in response to Servant of Cats

Thanks a lot for the detailed reply!

You’re right, professional thieves might use things like Faraday bags or just power off the phone right away.

But honestly, just putting mobile data settings behind Face ID, Touch ID, or a passcode would block the easiest and most common way they cut off tracking — just pulling down Control Center and turning it off.

Most thieves don’t walk around with Faraday bags or know those advanced tricks. A lot of them just use simple stuff like disabling mobile data or switching on Airplane Mode right after grabbing the phone.

Adding an extra layer of security here would make a huge difference in real-world cases, helping way more people track and recover their phones.

Sure, it might not stop every theft, but it would definitely make stealing an iPhone a lot harder and way less worth it.

Apple’s always saying how much they care about user security — this would be a big step in that direction.

Reply

Answer 4

MaysSoumaa Author

Level 1

6 points

Apr 27, 2025 2:33 AM in response to giofurlanetto

Hey, thanks a lot for the tip! Yeah, disabling Control Center from the lock screen definitely helps a bit, and it’s something I always recommend too.

But what I meant is something a bit deeper — even if Control Center is blocked, if someone somehow manages to unlock the phone (or if there’s no Face ID or Touch ID set up), they could still turn off Mobile Data manually through Settings.

That’s why I think Mobile Data (and maybe Airplane Mode) should require authentication no matter where you try to turn it off — not just from the Control Center.

I really believe adding that extra step would make it way harder for thieves and a lot easier for people to get their stolen phones back.

Just an idea, but honestly, I think it could save a lot of phones.

Reply

Critical Security Flaw: Mobile Data Should Not Be Disabled on Locked iPhones

Similar questions