7 New Apple Security Features from WWDC

Enhanced Security and Privacy Features Unveiled at Apple's WWDC

During this week’s Worldwide Developer Conference (WWDC) keynote, Apple placed significant emphasis on bolstering both security and user privacy.

New features were demonstrated, ranging from processing Siri requests directly on the device to a revamped privacy dashboard slated for iOS 15, which is scheduled for release later this year.

This new dashboard is designed to provide users with unprecedented clarity regarding data collection practices by their installed applications, detailing both what data is gathered and when.

Subtle Security Improvements Beyond the Keynote

Beyond the prominent security announcements made during the main, two-hour keynote – known for its Memoji presentations – Apple also unveiled a number of additional security and privacy enhancements during its WWDC developer sessions.

These features were introduced with less fanfare, but are nonetheless crucial for maintaining a secure user experience.

Key New Features Highlighted

A comprehensive review of the WWDC developer sessions has revealed several noteworthy and impactful new features.

On-device Siri processing: Audio requests to Siri are now processed directly on the user’s device, enhancing privacy.
iOS 15 Privacy Dashboard: This new feature offers a clear overview of app data access.
Enhanced Tracking Transparency: Further refinements to the system that requires apps to request permission before tracking users across other apps and websites.

These updates collectively represent a substantial commitment to user privacy and data security by Apple.

The company continues to prioritize features that empower users with greater control over their personal information.

Passwordless Authentication via iCloud Keychain

Apple has joined the movement to phase out traditional passwords. During their “Move beyond passwords” session for developers, they showcased Passkeys within iCloud Keychain. This innovative method utilizes WebAuthn, alongside the security of Face ID and Touch ID, to enable passwordless authentication.

This functionality, slated for release in both iOS 15 and macOS Monterey, eliminates the need to create and remember passwords when registering for new accounts on websites or applications. Users will simply select a username and then verify their identity using either Face ID or Touch ID.

The resulting passkey is securely stored within your keychain and synchronized across all of your Apple devices via iCloud. This ensures accessibility without the burden of memorization or the necessity of a separate hardware authentication device.

Garrett Davidson, an Apple engineer specializing in authentication experiences, stated that this system offers a superior experience: “Due to the simplicity of a single tap for login, it represents a more convenient, rapid, and secure authentication method compared to many currently used approaches.”

Although widespread availability on iPhones and Macs is not immediate – Apple clarifies the feature remains in its initial development phases and is presently inactive by default – this development underscores the increasing industry trend towards password elimination. Passwords are frequently forgotten, reused across platforms, and vulnerable to phishing attacks.

Previously, Microsoft announced intentions to enable password-free access to Windows 10. Similarly, Google has recently affirmed its commitment to “developing a future where passwords become obsolete.”

Key Benefits of Passkeys

Enhanced security against phishing and data breaches.
Improved user experience with simplified login processes.
Seamless synchronization across Apple devices through iCloud.
Elimination of password-related frustrations like forgetting or resetting.

The implementation of Passkeys in iCloud Keychain represents a significant step towards a more secure and user-friendly online experience. It leverages existing Apple technologies to provide a robust and convenient alternative to traditional password authentication.

Microphone Access Indicator in macOS

Beginning with iOS 14, iPhone users have been provided with a visual cue – a green or orange indicator in the status bar – to denote when applications are utilizing the microphone.

This functionality is now being extended to desktop operating systems. Users of macOS Monterey will gain the ability to monitor which applications are currently accessing the Mac’s microphone.

Control Center Integration

The microphone access status will be displayed within the Control Center, as reported by MacRumors.

This new feature is designed to work alongside the existing security measure: a green light illuminates near the Mac’s webcam whenever the camera is actively in use.

Enhanced Privacy

The addition of a microphone indicator provides users with greater transparency regarding application access to sensitive hardware.

This allows for increased user awareness and control over their privacy settings, ensuring that only authorized applications are utilizing the microphone at any given time.

The indicator will show which apps are actively using the microphone.
It complements the existing webcam indicator light.
This feature enhances user privacy and security.

By providing clear visual feedback, macOS Monterey empowers users to maintain a higher level of control over their system’s security and privacy.

Enhanced Clipboard Security in iOS 15

The upcoming iOS 15 operating system introduces a range of privacy enhancements, including Mail Privacy Protection and App Privacy Reports. Alongside these, a new feature known as Secure Paste is being implemented to better protect clipboard data.

This functionality allows for the transfer of content between applications, but prevents the receiving app from accessing the clipboard's contents until a paste action is initiated by the user. This represents a notable advancement compared to iOS 14.

Previously, iOS 14 would only alert users when an app accessed clipboard data, but did not actively block the access itself. Apple clarifies that Secure Paste empowers developers to facilitate pasting from other apps without requiring access to the copied information beforehand.

According to Apple, utilizing Secure Paste will also eliminate the need for clipboard transparency notifications, offering users increased reassurance regarding their privacy.

Although seemingly minor, this feature is a direct response to a significant privacy concern identified in the previous year. Investigations in March 2020 uncovered that numerous widely-used iOS applications, such as TikTok, were secretly monitoring user clipboards.

This monitoring potentially exposed users to the risk of sensitive data being accessed without their knowledge or consent. The Secure Paste feature aims to mitigate this risk by controlling access to clipboard information.

Enhanced Fraud Safeguards for Apple Card

The incidence of payments fraud has significantly increased due to the recent pandemic, prompting Apple to implement new security measures. Initially reported by 9to5Mac, the company has unveiled Advanced Fraud Protection. This functionality will empower Apple Card holders to create updated card numbers directly within the Wallet application.

Specifics regarding the feature are currently limited, as it is not yet active in the initial iOS 15 developer beta release. However, Apple’s description indicates that Advanced Fraud Protection will facilitate the generation of dynamic security codes.

These codes, typically the three-digit verification value used during online transactions, will be refreshed periodically. This enhancement is designed to bolster the security of online Card Number transactions.

According to Apple’s concise explanation, “Advanced Fraud Protection enables Apple Card users to utilize a security code that is updated frequently, thereby increasing the security of online transactions.” Further clarification has been requested from Apple.

Key Benefits of Advanced Fraud Protection

Increased security for online purchases.
Regularly changing security codes minimize risk.
Easy card number management within the Wallet app.

This new feature represents a proactive step by Apple to combat the growing threat of online fraud and protect its customers’ financial information. The ability to generate new security codes on demand offers a significant advantage in mitigating potential risks.

Utilizing Apple Watch to Authorize Siri Commands

Driven by the increased use of face coverings during the pandemic, Apple initially launched “Unlock with Apple Watch” in iOS 14.5. This functionality allowed iPhone users to bypass Face ID and securely unlock their device, as well as validate Apple Pay transactions, through their paired Apple Watch.

With the release of iOS 15, the utility of this feature is being broadened. Apple has officially stated that users will shortly be able to employ this alternative authentication process for initiating Siri requests.

This includes tasks like modifying phone configurations or having messages read aloud. Presently, completing these actions requires users to input a passcode, password, or utilize Face ID for verification.

How the Feature Works

Apple clarifies that the system leverages the secure connection established with your Apple Watch to process Siri requests. It also provides a means to unlock your iPhone when obstacles, such as a mask, hinder Face ID’s ability to recognize your face.

For this functionality to operate, your Apple Watch must have a passcode enabled, be currently unlocked, and be worn securely on your wrist.

The expansion of “Unlock with Apple Watch” to include Siri requests offers a more convenient and seamless user experience, particularly in situations where Face ID is unavailable.

Independent Security Updates for iPhones

Apple is implementing a new strategy to deliver security enhancements to iPhone users who prefer not to immediately adopt the newest iOS version, iOS 15. The company will begin releasing security patches separately from feature updates.

This change allows users, upon the arrival of iOS 15 later this year, to choose between a full iOS update or maintaining their current iOS 14 installation while still receiving critical security fixes.

A New Update Option

According to Apple, as reported by MacRumors, iOS now presents users with a choice of two software update paths within the Settings application.

Users can opt to upgrade to iOS 15 for the newest functionalities and the most comprehensive security updates. Alternatively, they can remain on iOS 14 and continue to receive vital security improvements until they are prepared to upgrade to a future major iOS release.

Following Google’s Lead

This approach mirrors a practice already established by Google. Google routinely distributes monthly security patches to Android users, ensuring devices remain protected even without full operating system upgrades.

By decoupling security updates, Apple aims to provide enhanced protection for a wider range of users, accommodating those who prioritize stability or have compatibility concerns with newer iOS versions.

The availability of independent security patches represents a significant step towards improving the overall security posture of the iPhone ecosystem.

Mac’s New “Erase All Contents and Settings” Feature

Previously, completely resetting a Mac required a multi-step process involving full device erasure and subsequent macOS reinstallation. This process was often time-consuming and complex.

Fortunately, Apple is streamlining this procedure. The “erase all contents and settings” functionality, familiar to iPhone and iPad users, is now available in macOS Monterey.

Simplified Factory Reset Process

This new option enables users to perform a factory reset on their MacBook with a single click. Apple explains that System Preferences now includes a feature to remove all user data and applications installed by the user.

The operating system itself remains intact following the reset. Because Macs equipped with Apple Silicon or the T2 chip utilize full-disk encryption, the erasure is achieved instantly and securely by invalidating the encryption keys.

How the Secure Erase Works

On Macs with Apple Silicon or the T2 chip, data is always encrypted. Therefore, the “erase all contents and settings” feature doesn’t physically overwrite the data.

Instead, it securely and rapidly renders the data inaccessible by destroying the encryption keys. This provides a significant speed and security advantage.