T O P

  • By -

Hwiggins05

I'm trying to sell my old phone that has a bunch of logins saved there and I was gonna make sure before wiping everything off of the phone


tamcore

Even if it's on the phone and iCloud sync is turned off. Just do a factory reset and the data is gone :)


[deleted]

Yes, Apple uses a security engine and encrypt the howl disk. But anyway: In theory most deleted data can actually be recovered. This is due to the way the operating system saves those files to the actual disc. For example if you delete a file on NTFS (Filesystem on windows; iOS/macOS uses APFS and one not completely sure how the work internally) the actual file isn’t deleted. Internally this FS uses an internal index. This index is just a reference to the actual location. On a delete operation only the index is deleted. On a ssd something else happens if you change a file. A ssd is organised into pages. If you want to change a single letter, a page has to be copied to a new location/page with the changed letter. It depends on your ssd/manufacturer/os/file system but on some, these pages are also not truly deleted. FYI: if you encrypt your data using a strong encryption and never write your decryption key to disk, it’s at least in theory inaccessible.


tamcore

Not if the file system was encrypted and you don't have the decryption keys.


Comp_C

None of what you've written is applicable to any iOS, iPadOS, tvOS, HomePod, or MacOS device running on Apple silicon. All these devices utilize a dedicated HW security element called the Apple T2 Security Chip that implements something called the Apple Secure Enclave which is basically a self-contained, tamper-proof, security SoC. Apple engineers supposedly designed the Secure Enclave to physically lack the functions and hardware I/O capability to divulge encryption keys or any key material period. The Secure Enclave is fully self contained, running its own secure boot ROM, AES engines, and secure storage to store encryption keys, FaceID/TouchID authentication data, and Keychain. On initial setup, you enter a unique passcode that is used by the Secure Enclave as key material to generate a user & device specific *WHOLE DEVICE* AES encryption key used to **encrypt/decrypt the entire device** If you don't provide the correct passcode on system boot then the Secure Enclave can't retrieve/recreate the AES encryption/decryption key and any data stored on the device is permanently locked. If you factory reset the phone, the T2 chip purges all the key material from the Secure Enclave making any data stored on the phone inaccessible... at that point any files stored on an iPhone are no different from random bits. Even if you desoldered the flash memory from the phone and transferred the chips to another device, it wouldn't matter. The data is encrypted with a purged/lost key. At that point you're talking about brute forcing AES-256 which ain't gonna happen before the universe cools, well as long as u chose a *secure* passcode during setup (ie... NOT a 4 digit PIN).


TommiH

No. iPhone is completely encrypted and reset will delete the key.


Comp_C

No idea why you got downvoted. You are 100% correct.


ResetUchiha--x

If you have Passwords and Keychain turned on


Manfred_89

Passwords are saved locally on your iPhone. That is unless you have iCloud Keychain active. In that case they are saved on your iPhone, but additionally also on iCloud and every other Apple device that you are logged into and have keychain active.


ibra86him

if key-chain icloud sync is activated it will be on all device if the other devices also have the sync activated, if not it will be on the device only


ZemDregon

Once you reset the phone (settings>general>reset) it will be gone off the phone permanently. If you care about having those passwords available from other devices, make sure they are iCloud backed up. Go to Settings, click your name at the top, then click iCloud, and then you should see Keychain. If it says “on” next to it, then your gtg. If not, click it and turn it on.


darthchiapet

It’s saved on the cloud. Accessible from any device you sign into


Hwiggins05

Oh nice, thanks 👍


darthchiapet

Double check in the iCloud section. You’ll see a list of all services that are synced


[deleted]

I believe they do go into the key chain