iPhone Device Health & Safety Checks
Section updated .
Device health on an iPhone means four things are true at once: you have a recent backup, your Apple Account cannot be taken over, you can recognise a fake Apple message, and a thief who watches you type your passcode still cannot drain your accounts. Each check below takes under five minutes and ends with something you can look at to confirm it worked. Nothing here requires an extra app or a subscription.
Almost every genuinely bad iPhone day traces back to one of four gaps. The phone breaks or is lost and the last backup is eleven months old. Someone gets into the Apple Account and locks the owner out of their own photos. A text that looks like it came from Apple leads to a page that harvests the password. Or a phone is stolen in a bar after the thief has already shoulder-surfed the passcode — and the passcode alone is enough to change everything.
None of these are exotic attacks. They are the ordinary failure modes of a device that holds your photos, your messages, your payment cards, and the reset link for every other account you own. The four guides here close those gaps in a fixed order, because backup comes before everything: it is the only control that still helps you after something has already gone wrong.
Guides in this section
Check your iPhone backup is real
Confirm iCloud Backup ran recently, see what it actually includes, and fix the storage error that silently stops it.
Read the guide →Secure your Apple Account
Two-factor, trusted devices, a recovery contact, and the review that removes access you forgot you granted.
Read the guide →Spot fake Apple texts and emails
The four tells in a phishing message that claims your Apple Account is locked, and what to do instead of tapping.
Read the guide →Stolen Device Protection & lock screen
Stop a thief who saw your passcode from changing your Apple Account, and trim what your lock screen gives away.
Read the guide →How to work through this section
Work in blast-radius order. Start with backup verification, because a current backup makes every other failure survivable. Then harden the Apple Account, since that single account controls backup, Find My, and the reset path for your other logins. Learn the phishing patterns next, because social engineering is how most account takeovers actually start — not by breaking encryption. Finish with Stolen Device Protection, which specifically defends the passcode-was-observed scenario the other three do not cover.
Re-run the backup check monthly and after any trip; re-run the rest twice a year, or immediately after any message that made you hesitate.
Frequently asked questions
How often should I check my iPhone backup?
Check that a backup completed at least once a month, and always before travelling, before an iOS update, and before handing the phone in for repair. The check is a single screen in Settings and takes about thirty seconds.
Is iCloud Backup enough, or do I need a computer backup too?
iCloud Backup is enough for most people because it runs automatically every night the phone is charging on Wi-Fi. A computer backup is worth adding if you cannot afford the iCloud storage for a full backup, or if you want a copy that no online account can lock you out of.
What is the single most valuable iPhone safety setting?
Two-factor authentication on your Apple Account, because that account controls your backup, your Find My access, and the password reset path for many other services. It is on by default for accounts created in recent years, but it is worth confirming rather than assuming.
Does a passcode protect me if someone steals my unlocked iPhone?
Not on its own. A thief who watched you type the passcode can use it to change your Apple Account password unless Stolen Device Protection is turned on, which requires Face ID or Touch ID plus a delay for sensitive changes away from familiar locations.
Do I need antivirus software on an iPhone?
No. iOS apps are sandboxed and third-party antivirus cannot scan the system in the way it does on a computer. The realistic iPhone threats are phishing, account takeover, and physical theft, which are what the guides in this section address.
Be first when the email edition starts
The briefing is published on this site every morning. The email edition is not sending yet — leave your address and you’ll be among the first told when it starts. Nothing is sent in the meantime.