By Jacob Roach
Apple gives you a lot of control over your privacy and security. Make good use of it.
The iPhone has a lot of settings to bolster your privacy. Apple, despite collecting a decent amount of your data, gives you more control over your privacy than your average gadget, mobile or not, but many of these settings are turned off by default.
It’s easy to change that. You can lock down your location sharing, app sharing, and targeted advertising, as well as enable features that will help you find your device if it’s lost or stolen. All of the settings I’ve rounded up are based on the latest iOS 26 version, which debuted shortly before the release of the iPhone 17. If you have an older version of iOS, certain settings may be in a different location, but the majority of iPhones should have access to most (if not all) of these settings.
iPhone Privacy Settings to Change
Privacy is personal, so you shouldn’t treat the settings I listed here as a checklist. Treat them as suggestions. Your tolerance for data collection and the individual apps you have installed will largely dictate what settings you need to change. And remember, there’s some level of privacy you have to give up with any device connected to the internet, so although these settings will help your online privacy, they won’t make you completely anonymous.
You’ve undoubtedly come across an app asking to track you, which the iPhone, thankfully, lets you deny. If you want to turn off all tracking, you can. By default, the iPhone allows apps to request to track you, following you around other apps and websites to see what you’re doing. In the settings, you can automatically deny app tracking requests whenever you install a new app.
Open the Settings app, swipe down to the bottom, and choose Privacy & Security. Choose Tracking, and tick off the All Apps to Request to Track setting. You’ll also see any apps you’ve given tracking permission to listed, and you can revoke those permissions if you want.
There are a lot of reasons you’d want to share location data with an app—for example, when using Apple or Google Maps—but apps that don’t need your location might still request it. Follow the same path of Settings, then Privacy & Security, but choose Location Services after. There, you’ll find all of the apps that have access to location services, their individual settings, and the option to turn off location services altogether.
I don’t recommend doing that, but you can still clean things up. First, for any app that doesn’t need a precise GPS signal (for instance, a retailer’s app), turn off the Precise Location setting, which you can find by tapping into an app. Once that’s done, choose System Services, which covers all of the functionality built into the iPhone that accesses location data.
There are a lot of settings here you probably want to leave on, such as Setting Time Zone and Cell Network Search, but there are some you can take off. At the bottom, you’ll find the Product Improvement section, and you can safely turn off those settings. You can also turn off Significant Locations & Routes if you don’t want your iPhone to automatically pick up your home or, for instance, your route to work.
In the same Privacy & Security menu, just below the previous two settings, you’ll see a list of apps. These are apps that other apps might request access to, and you can customize those settings here. A great example is already set up on the iPhone. You’ll see that the Focus app is shared with the Messages app, which is pretty useful to let your iMessage friends know that you need some time to focus.
There’s some app sharing you might want to turn off. For example, the Photos app is fully shared with Google Drive on my iPhone, but I don’t use Google Drive for photos. There’s a ton of information that travels along with photos—metadata like the date captured and location—that I’d rather not share. Tapping in, I can change Google Drive to Limited Access to choose what I share, or I can block it outright.
By default, the iPhone doesn’t share a ton of data. In fact, most settings are turned off out of the box, but there are a few analytics you’ll need to dig in and turn off manually. Once again, head to the Privacy & Security menu, and swipe all the way down to the bottom. There, you’ll find two settings: Analytics & Improvements and Apple Advertising.
First, analytics. Tap in, and you’ll find two settings turned on: Share iPhone Analytics and Share With App Developers. Turn those off. You might find some other settings depending on what you’ve connected to your iPhone (like an Apple Watch), and you can turn off that analytics sharing, as well.
Next is advertising. Apple Advertising is more focused on privacy than other platforms, blocking ads from tracking you across websites and services. You can turn off the Personalized Ads toggle. You’ll still get ads, but they’ll be generic. If you turn on Apple Advertising, you can tap into the Ad Targeting Information screen to see what data is shared, such as your birth year, zip code, and the categories for apps you have downloaded.
This isn’t really a setting, but the iPhone has built-in privacy reporting tools that can give you insight into what data apps are requesting and using. In the Privacy & Security menu, near the bottom, you’ll see the App Privacy Report and Apple Intelligence Report.
For the former, you’ll see the domains the app contacts each time you use it, as well as a layout of how many domains an app contacts. For Apple Intelligence, you’ll see private compute requests and what data was shared with the request. This report is exported as a JSON file, and you’ll need a text editor to view it. Regardless, both of these reports are fairly technical, and they don’t help your privacy; they just give you more information.
Apple automatically stores and syncs anything you put in the Notes app through iCloud, so no, those random thoughts you jotted down five years ago aren’t completely private. Thankfully, you can keep them private with an “On My iPhone” account, which, as the name suggests, doesn’t sync your notes and keeps them local to your device.
To set it up, open Settings and go down to the bottom of the list for Apps. Find the Notes app and toggle the On My iPhone Account setting on. Just above it, you can also set a password if you want to encrypt and lock any highly sensitive notes. Remember, you won’t be able to pull up these notes on another Apple device because they won’t sync, and if you lose your iPhone, you may not be able to access your notes altogether without a recent backup.
You can hold down on any app icon, select Edit Home Screen, and tap an app to hide it. That’ll keep the app on your phone, but it won’t appear on your home screen. (You can search for it via Spotlight.) You can also hold down and select Require Face ID to lock the app, meaning it’ll require biometric authorization every time you open the app.
That’s great for apps, but you can do the same thing for photos, as well. Hold down on any photo in the Photos app and select Hide. It’ll be put into your Hidden album, which is locked behind either Face ID or your password. You can find the Hidden album in the Collections tab, at the bottom under the Utilities section.
iPhone Security Settings to Change
The iPhone is pretty secure out of the box, and Apple courts users into leveraging its security features as you set up a new device. Just like the privacy settings, however, the particular settings you use here are up to you. Many security settings will sacrifice privacy, and vice versa. You can’t locate a stolen device if you aren’t using location services, for example.
You need to set up Face ID when you set up an iPhone, and you’re probably using it anyway. But I’ve seen some misconceptions about how Face ID (and biometric authentication more broadly) works. Your fingerprint for Touch ID and images for Face ID are not sent to Apple, and they’re generally more secure than a password or simple PIN.
Instead, your fingerprint or face is used to generate an ID, which is encrypted and stored in Apple’s Secure Enclave, locally on your device. When you unlock your device, Face ID or Touch ID is checked against this ID, and if there’s a match, your device unlocks. If you’ve been avoiding Face ID due to privacy concerns, you aren’t protecting yourself as much as you might think.
You and I both know it—you should be using two-factor authentication (2FA). I hate typing in a code or pulling up a second device as much as the next person, but it’s hard to overstate just how much more secure an account is with two authentication factors instead of one. And, you can easily set up 2FA for your Apple account from your iPhone.
Select your name at the top of the Settings app, which will open your Apple account information. Select Sign-In & Security, and then choose Two-Factor Authentication. Here, you’ll see devices you can use for 2FA, including the iPhone you’re using. When signing into your Apple account on another device, you can use any of the devices listed as your second factor, be it another Apple product or a text sent to a verified phone number.
iCloud encrypts your data, but it doesn’t use end-to-end encryption, at least by default. Out of the box, Apple manages your encryption keys, so it could, technically, decrypt the data you store in iCloud. Although that’s unlikely, you can still set up end-to-end encryption and manage your own encryption keys with Advanced Data Protection.
To turn it on, open Settings and select iCloud. Then, scroll down and select Advanced Data Protection. To turn it on, you’ll need to set up some account recovery options. Apple won’t be able to decrypt your data, so if you don’t have any recovery options set up, you won’t be able to decrypt or recover your data.
Apple includes Stolen Device Protection with your iPhone, but it’s turned off by default. This feature requires you to verify with Face ID or Touch ID when taking certain actions without a password to fall back on, and it enforces a security delay, where critical actions such as changing your Apple password are only possible after a one-hour delay.
There are two forms of Stolen Device Protection. You can either have these features on all the time, or only when you’re away from familiar locations. Note that if you choose the latter, you’ll need to keep the Significant Locations & Routes setting mentioned earlier turned on.
If you set up Stolen Device Protection to only work when you’re away from familiar locations, it’ll kick in automatically. However, Stolen Device Protection doesn’t lock down everything about your iPhone. It crops up in certain situations, which Apple details on its support page. You can turn on the setting in the Privacy & Security menu at the bottom of the page.
You often have to trade privacy for better security, and that’s the case for both Stolen Device Protection and Apple’s “Find My” feature. To make sure you have it on, open Settings, select your account at the top, and choose Find My. Make sure Find My iPhone is turned on. If you tap in, you can also turn on Send Last Location, which will update the location of your iPhone if it’s about to die.
Although you’ll need to have location services running, Apple says that devices using iOS 17 and later don’t need to share that location data. When offline, at least, Apple can’t see location information when you have Find My turned on.
Finally, a bit of operational security. If you have sensitive information that could pop up in notifications, you can obfuscate how notifications appear while your iPhone is locked. It’s a small change, but it can keep you protected from someone peaking over your shoulder or picking up your phone while it’s locked.
Open Settings and head to Notifications. There, switch the display to Count and change Show Previews to either When Unlocked or Never. If you have a particularly sensitive app—say, an encrypted messaging app—you can also customize individual app notifications on this screen.
iPhone Privacy and Security Apps to Download
The iPhone provides a surprising number of privacy and security tools, from app privacy reports to a built-in password manager via the Passwords app. Some functions are better served with a third-party app, though, either for better security or more features. Although all of the apps I’m recommending here have paid options—and I recommend those paid plans—they all also have a free version if you don’t have the money to spare.
ProtonVPN is the best VPN you can use, and you can get started with it for free. While most free VPNs are questionable at best, Proton’s free service is rock solid. You’re limited to slower speeds and only have access to a handful of servers, but it still works. I’d be worried if a free VPN didn’t impose any limitations, frankly. It’s also one of the best VPNs for iPhone, mainly due to its excellent speed. Proton tops the charts in our speed tests, and although others, such as NordVPN, are close, Proton has maintained its lead across desktop and mobile.
The iPhone has a VPN built in, but it’s not the same thing as commercial VPNs as most people know them. Rather, it’s a configuration tool if you want to set up your own VPN. If you want a tool to mask your IP address and help you stay more private online, you’ll need a third-party VPN, and Proton VPN is the best.
A Password Manager
Bitwarden ranks as the best password manager you can use, though Proton Pass takes a close second. Both offer free options, and they’ll give you more flexibility when storing and sharing credentials compared to Apple’s built-in Passwords app.
Although Apple’s Passwords app is plenty secure, it’s limited. An app like 1Password has apps for Windows and Android, for instance, which Passwords lacks. Third-party password managers let you store a wide range of data, too, from passwords and passkeys to encrypted documents and medical insurance.
Encrypted Email
You’ve locked down your messages; now it’s time for email. Google recently started offering end-to-end encryption for Gmail, but only for Google Workspace customers. If you want end-to-end encryption for personal use, you’ll need an encrypted email service like Proton Mail, which is my favorite option.
There’s a lot to like about Proton Mail, but from a security standpoint, it does a couple of things right. First, if you’re sending emails to another Proton Mail user, you get the convenience of a service like Gmail, but with true end-to-end encryption. Your emails are encrypted before they leave your device, and they’re only decrypted once they’re delivered.
You can also send emails to non-Proton users with end-to-end encryption, either using Proton’s password-protected email feature or by sharing your public key, though that requires a bit of technical know-how on both parties.
By Jacob Roach
Jacob Roach is a product writer and reviewer at WIRED, focused on software as a service (SaaS) products, including VPNs, password managers, cloud storage, and antivirus applications. Previously he worked as lead reporter at Digital Trends, and his work has been cited in Fox News, Business Insider, and Futurism, among … Read More
