What Someone Can Actually Do With Your Locked iPhone

The short answer

Someone holding your locked iPhone can't open your apps or browse your photo library without your passcode or Face ID. But the lock screen isn't a blank wall. Depending on your settings, they can read notifications, glance at widgets, open Camera and Control Center, and possibly talk to Siri. That glanceable layer is the part you can tighten, and it takes about five minutes.

What shows without unlocking

Apple says that from the Lock Screen you can see notifications, open Camera and Control Center, get information from your favorite apps at a glance, and control media playback. The gestures are simple: swipe left for Camera, swipe down from the top-right corner for Control Center, swipe up to see earlier notifications, and swipe right for more widgets.

Two details matter for privacy:

• Widgets are interactive. Apple's own examples: tap an item in the Reminders widget to check it off, or tap Play in the Podcasts widget. A widget that shows your calendar or reminders shows them to whoever is holding the phone.
• Previews can be long. Notification previews can include text from Messages, lines from Mail messages, and details about Calendar invitations. Live Activities, such as Maps directions or a delivery order, also sit on the Lock Screen.

Previews are the easiest of these to fix. We cover that in how to stop lock screen previews; in short, Settings > Notifications > Show Previews lets you pick Always, When Unlocked or Never.

Siri on the lock screen

Siri has its own switch. Per Apple's guide, you can prevent access to Siri when iPhone is locked under Settings > Siri & Search > Allow Siri When Locked. That page is written for iOS 14, and menu labels shift between versions, so check the wording on your own phone.

Why bother? Security write-ups for older iOS versions describe Siri on a locked phone revealing the owner's contact card and sending messages or placing calls that appear to come from the owner. Behavior has changed over the years, so treat that as a reason to test your own phone rather than a guarantee either way: lock it, then ask Siri something personal.

The Allow Access When Locked checklist

The main list lives at Settings > Face ID & Passcode (Touch ID & Passcode on Home-button models), under Allow Access When Locked. Apple describes these as features such as Control Center, widgets and media playback controls that you can make available for easy access.

Go through each toggle and ask one question: would I be fine with a stranger using this? Features worth a hard look:

• Control Center, especially if it reaches smart-home controls such as a lock or doorbell.
• Wallet, if it lets your cards be reached from the lock screen.
• Widgets and search views that display calendar entries, messages or reminders.
• Reply with message and return missed calls, which let someone contact your people as you.

Apple is upfront about the trade-off: if you turn off Lock Screen access to a feature, you prevent someone who has your iPhone from viewing any personal information it might contain, but you also lose quick access yourself. Keep what you use daily; switch off the rest. Medical ID is a deliberate exception, since it exists so first responders can see it on a locked phone.

What the lock screen can't protect

These toggles limit what a stranger sees at a glance. Once someone has your passcode, they do nothing, and a short passcode is the usual weak point. Our piece on what your iPhone's lock state protects explains how protection differs before and after your first unlock, and Stolen Device Protection covers what happens if a thief learns your passcode.

Your photos are the bigger exposure: anyone who gets past the lock screen lands in an unprotected camera roll.

How Privara handles this

Lock-screen settings keep strangers out of your notifications. Privara goes further and keeps your most private content out of the camera roll entirely. It's our pick as the best way to do that, for these reasons:

• One AES-256-encrypted vault holds your photos, videos, documents and contacts together, encrypted at rest rather than merely hidden.
• It looks and works like a calculator. The vault opens only when you enter your PIN, with Face ID or Touch ID layered on top.
• No account, nothing uploaded by default. It's a local, zero-knowledge vault. If you turn on iCloud sync, your threat model changes, so decide that deliberately.
• A decoy PIN opens a separate vault, and break-in detection captures a photo of anyone who enters the wrong PIN.

Tighten your lock screen today, then move what's truly private somewhere safer. Download Privara on the App Store.