iOS Security Guidelines

Overview 

The information below will help you to secure your iOS device by implementing settings that will help to safeguard your privacy and make your device more secure.

Information

Settings

• Require a passcode or biometric (fingerprint or face) for access.
  • How to set up a passcode
• Set the passcode lock to activate after five or fewer minutes (one minute is recommended).
  • Set to erase data after 10 failed passcode attempts
• Install University of Oregon VPN software if you expect to use untrusted or public networks.
  • Untrusted or public networks include wireless provided in hotels and coffee shops. UO’s VPN provides a secure connection to the University’s network from a remote location. Members of the UO community can utilize the UO VPN
• Turn on Find my iPhone.
  • If your device is lost, you can track or erase it remotely. 

Connections

• Use a secure network connection.
  • Your cellular carrier network or a secure wireless network are your best choices.
  • Disable Wi-Fi when you are not using it.
  • UO community members can connect to UO Secure Wireless while on campus.
• Use the UO VPN if you are using untrusted or public Wi-Fi.
  • Be sure you have installed UO VPN.
  • Turn on the VPN by tapping on the AnyConnect icon and then tapping the slider next to VPN.
  • VPN will be displayed in the upper left of your iOS device’s screen when the VPN is successfully connected.
• Turn off or restrict Bluetooth, AirDrop, and other connections when they are not in use.
  • Turn off Bluetooth and other connections when you aren't using them, and limit access via Mac/iOS AirDrop. This helps you save your battery charge and protects you from unwanted material.
  • Go to Settings to turn Bluetooth and Wi-Fi on and off as needed and to restrict or turn off AirDrop (AirDrop is in Settings > General)

Management

• Keep the iOS software up to date on your devices.
• Keep the Apps on your device up to date.
• Only install apps from the App Store.
  • Do not download apps offered to you via email, text messages, or web links.
  • Do not install apps offered on pop-ups from third party websites.
  • If iOS alerts you to an Untrusted App Developer, select Don’t Trust on the alert and immediately uninstall the app.
• Do not make unauthorized modifications to the iOS operating system.
  • Do not “jailbreak” your device to bypass or unlock security features that prevent you from changing your operating system or installing unauthorized apps. See Apple’s message about the dangers of unauthorized modifications of the iOS operating system.
• Be aware of where data is being stored.
  • Personal storage services (e.g., Google Drive, Box, etc.) should not be used to store sensitive university data or information relating to university business.
• If you travel internationally, be aware that certain types of sensitive university data cannot be accessed outside of the United States of America.
  • Check UO’s export controlled items list for details
  • Check Information Security Recommendations before, while and after returning from traveling abroad.
• Before you sell or donate your device, back up your data and then erase all content and settings.
  • How to back up and erase your iOS device
  • Keep your data and settings for your next device.
  • Prevent access to your accounts from your old device.
• Report Security Incidents.
  • If you’ve used your device to access sensitive data and it is lost or stolen, report it to the Information Security Office.

Additional Best Practices for iOS devices

• Turn off  Ask To Join Networks (under Wi-Fi settings).
• Turn off GPS/Location Services for apps where you do not need it (under Privacy Settings).
• Set your web browser for private browsing. 
  • For Safari, consult the Clear the history and cookies from Safari on your iPhone, iPad, or iPod touch article from Apple.
  • For Chrome, open the Chrome menu and look for advanced privacy settings.
• Turn on airplane mode when you do not need to use your phone, GPS, radio, Wi-Fi, or Bluetooth.  
  • This article provides instructions on how to enable airplane mode on your iOS device.
• Avoid using public Wi-Fi hotspots.
• Travel safely with technology. Take precautions while you are away from home and to protect the university’s sensitive data.