Click to Skip Ad
Closing in...
  1. amazon nest thermostat 3rd generation
    14:02 Deals

    Newest Nest Thermostat gets a rare Amazon discount ahead of Prime Day

  2. Prime Day Deals
    09:43 Deals

    These early Prime Day deals have prices so low, it’s like Amazon made a mistake

  3. Best Amazon Deals Today
    07:58 Deals

    15 hidden Amazon deals that are so exclusive, they’re only for Prime members

  4. Amazon Deals
    10:22 Deals

    Today’s best deals: Huge Prime members-only sale, $15 Echo Auto, $106 off Apple Watc…

  5. Best Kitchen Gadgets
    08:33 Deals

    Amazon shoppers are obsessed with this $23 gadget that should be in every kitchen

Warning: Don’t give your Apple ID password to any iPhone app that might be asking for it

October 11th, 2017 at 7:45 AM
Apple ID Popup on iPhone

Any savvy iPhone or iPad user will tell you that popups requiring you to enter your Apple ID and password are a pretty common thing. It usually happens while you’re inside Apple’s stores, although they can appear unexpectedly.

As a rule of thumb, do not enter your Apple ID when these popups show up in third-party apps. Apparently, they may be used to steal your Apple ID password.

Apple has a firm grip on the App Store, meaning that malware apps are not likely to be approved. But developer Felix Krause discovered that an app only needs about 30 lines of code to include a fraudulent “Enter your Apple ID password” popup that can be used to steal user data.

He also said that developers could run certain code only after an app is approved by Apple, and thus pass App Store vetting with flying colors.

Image source: Krausefx

Krause also explains that even if you use two-factor authentication, your user and password combination, once stolen, can be used to hack into other online accounts. Those people who recycle this combo are at risk of having hackers break into other services and apps.

One way to tell apart a phishing attempt from a genuine Apple popup is to try to close the app that was open when the popup appeared — unless it’s an Apple app. If the dialog disappears from the screen, it’s likely it came from the app and might be a phishing attack. If it stays on the screen, then it’s from Apple.

Apple should find a way to prevent developers from displaying popups that mimic system alerts. But in the meantime, keep an eye out for these events. If you’re worried about an app that displays such popups, you should simply ditch it and find a different one that serves the same purpose. Reporting potentially fraudulent apps to Apple is also advisable. Finally, only enter your password on the iPhone or iPad in Apple’s own apps, whenever they require you to do so.

Chris Smith started writing about gadgets as a hobby, and before he knew it he was sharing his views on tech stuff with readers around the world. Whenever he's not writing about gadgets he miserably fails to stay away from them, although he desperately tries. But that's not necessarily a bad thing.

Popular News