Your iPhone is encrypted, locked behind the Secure Enclave, and running every app in its own sandbox before you touch a single setting. None of that needs turning on. Two things do: Stolen Device Protection and Advanced Data Protection. Lockdown Mode is a third option, and almost nobody reading this should enable it.
Key Takeaways
- Face ID, device encryption, the Secure Enclave and app sandboxing are active by default. There is no setup step and no way to improve on them.
- Stolen Device Protection is off by default and needs iOS 17.3 or later. For ordinary theft it is the most useful switch on the phone.
- Advanced Data Protection extends end-to-end encryption from 15 iCloud data categories to 25, including iCloud Backup and Photos.
- iCloud Mail, Contacts and Calendars are never end-to-end encrypted, with or without Advanced Data Protection.
- Apple built Lockdown Mode for people targeted by mercenary spyware and says most people are never targeted by attacks of that nature. It breaks real functionality for protection you almost certainly do not need.
What Protects Your iPhone Without You Doing Anything?
Four layers, all on from the moment you set the phone up. They are why iPhone security advice is mostly short.
Face ID, Touch ID and the Secure Enclave
Apple puts the odds of a random person unlocking your iPhone with Face ID at less than 1 in 1,000,000. Touch ID is 1 in 50,000 with a single enrolled finger. Both figures rise for identical twins, for siblings who look like you, and for children under 13. That caveat is Apple’s, not a critic’s.
The more interesting part is where the data lives. Your face or fingerprint becomes a mathematical template inside the Secure Enclave, a separate processor with its own memory that the main chip cannot read into. Apple states plainly that it never leaves the device, is never sent to Apple, and is not in backups.
Encryption you cannot switch off
An iPhone encrypts its storage as a matter of course. What makes that mean anything is the passcode, because the keys protecting your files are tied to it. A phone with no passcode is one whose encryption unlocks itself the moment someone picks it up. The passcode is not a formality. It is the whole key.
App sandboxing
Every app on iOS runs in its own container and cannot reach into another app’s data. Access to your photos, contacts, microphone, camera and location is granted per app, by you, and can be withdrawn. This is why an iPhone does not need antivirus software the way a Windows PC once did. Apps are not in a position to inspect each other.
Memory Integrity Enforcement
On iPhone 17 and iPhone Air, with the A19 and A19 Pro chips, Apple added always-on memory tagging across the kernel and more than 70 userland processes. Apple calls it the most significant upgrade to memory safety in the history of consumer operating systems, the kind of sentence you would normally discount, except that it is aimed at something specific.
Mercenary spyware chains are built almost entirely on memory corruption bugs, and this makes that class of bug uneconomic to exploit. Note what it is not: a setting. It runs by default on the hardware that has it, which is the direction Apple keeps moving protections that once required Lockdown Mode.
The Two Settings Worth Turning On
Stolen Device Protection
This exists because of a specific crime: someone watches you type your passcode in a bar, then takes the phone. The passcode alone used to be enough to change your Apple Account password, lock you out of Find My, and empty your saved logins at leisure.
With it on, when your iPhone is away from familiar locations such as home or work, certain actions require Face ID or Touch ID with no passcode fallback at all: your saved passwords and cards, turning off Lost Mode, erasing all content and settings, setting up a new device or eSIM. A second tier carries a one hour security delay and then a second biometric check. That tier covers your Apple Account password, your passcode, your trusted devices and recovery key, and turning the feature back off.
It needs iOS 17.3 or later and has to be enabled before the phone is stolen, which is the entire point. Settings, then Face ID and Passcode.
Advanced Data Protection
By default, 15 iCloud data categories are end-to-end encrypted, including Health data and passwords in iCloud Keychain. Advanced Data Protection raises that to 25 by adding iCloud Backup, iCloud Drive, Photos, Notes, Reminders, Safari bookmarks, Shortcuts, Voice Memos, Wallet passes and Freeform. Because Messages ride inside iCloud Backup, it also closes the last gap in Messages encryption.
Three categories stay out permanently. iCloud Mail cannot be end-to-end encrypted because it has to interoperate with the rest of the world’s email, and Contacts and Calendars are built on the CardDAV and CalDAV standards, which have no end-to-end model. Apple says this openly. Anyone telling you Advanced Data Protection encrypts everything has not read the page.
Understand the trade before flipping the switch. Once it is on, Apple holds no key. Lose your devices and your recovery method and the data is gone, permanently, with no support call that can retrieve it. That is why Apple requires two-factor authentication, a device passcode, and at least one recovery contact or recovery key first.
What Does Lockdown Mode Actually Do?
It removes attack surface by switching off the features attackers use as entry points. It does not add a shield. It subtracts capability.
| Area | What Lockdown Mode does |
|---|---|
| Messages | Blocks most attachment types other than certain images, video and audio. Links and link previews are disabled. |
| Web browsing | Blocks complex web technologies. Some sites load slowly, break, lose web fonts, or show missing image icons. |
| FaceTime | Blocks incoming calls unless you have contacted that person in the past 30 days. SharePlay and Live Photos are off. |
| Apple services | Blocks invitations to shared homes, shared albums and similar services unless you invited the person first. Focus status and Game Center are disabled. |
| Photos | Strips location data from shared photos. Removes existing shared album invitations and blocks new ones. |
| Device connections | The device must be unlocked to connect to accessories or another computer. A Mac requires explicit approval. |
| Wireless | Stops automatic joining of non-secure Wi-Fi networks. Turns off 2G and 3G cellular on iPhone and iPad. |
| Configuration profiles | Blocks installation of configuration profiles and enrollment in Mobile Device Management. |
Phone calls, text messages and Emergency SOS keep working. You can exclude individual apps or websites if something you rely on breaks, though every exclusion is a hole you opened deliberately.
Who Actually Needs Lockdown Mode?
Almost nobody. Apple’s wording is that it is for “the very few individuals who, because of who they are or what they do, might be personally targeted by some of the most sophisticated digital threats,” and that most people are never targeted by attacks of this nature.
In practice: journalists working on stories a government would rather bury, human rights defenders, dissidents and their families, senior political staff, and anyone who has received one of Apple’s threat notifications. Those notifications arrive on the Lock Screen, by email and on the Apple Account website, and they carry a recommendation to enable Lockdown Mode plus a pointer to the Access Now Digital Security Helpline. If you get one, turn it on that day.
If you have not, Lockdown Mode buys you nothing against the threats you will actually meet. Phishing texts, fake delivery notifications, password reuse, a stolen phone in a pub, a scam call about your Apple Account: it does not touch any of these. It was built against a different adversary, one that costs millions of dollars to deploy and gets pointed at a small number of named people.
Frequently Asked Questions
Does Lockdown Mode stop viruses or scam messages?
No. It blocks link previews and most Message attachments, which closes some delivery routes, but a scam text asking you to tap through and enter your Apple Account password still arrives and still works if you fall for it. It defends against exploitation, not deception.
Can Apple read my iCloud Backup?
Under standard data protection, yes. Apple holds keys to iCloud Backup and can produce it in response to a valid legal request. Turn on Advanced Data Protection and the backup becomes end-to-end encrypted, along with the Messages history inside it. Mail, Contacts and Calendars stay readable by Apple either way.
MacReview Verdict
Turn on Stolen Device Protection this evening. It costs nothing, breaks nothing, and defends against the one attack that genuinely happens to ordinary people: somebody who saw your passcode and then took your phone.
Turn on Advanced Data Protection if you can honestly answer one question: could you get back into your account tomorrow if your phone went into a river tonight? A recovery key in a safe, or a recovery contact who will actually pick up, and you are fine. Without that, standard protection is the sensible choice.
Leave Lockdown Mode alone. Enabling it because security sounds good is a bad trade: you lose working websites, incoming FaceTime calls, 2G and 3G fallback in poor coverage, and Message attachments, in return for protection against an adversary who is not looking at you. If your work or your politics puts you in the small group Apple built it for, you already know, and you should switch it on today. Everyone else is better served by a strong passcode, two-factor authentication, and a healthy suspicion of unexpected messages.
