People across the internet have been raising concerns about potential security risks linked to an iPhone setting that many may have overlooked. Cybersecurity experts agree it is worth investigating. Earlier this year, social media users on TikTok and Instagram warned others about the AirPlay settings on their iPhones. A viral TikTok post advised iPhone users to ensure their AirPlay settings were not set to “Automatic.”
Accessing AirPlay Settings
This setting can be found on an iPhone by navigating to: Settings > General > AirPlay & Continuity > Automatically AirPlay. Under this option, Apple provides users with three choices: “Never,” “Ask,” or “Automatic.”
Expert Analysis
Kevin Tackett, CEO of Secure Ideas, told HuffPost that any additional connectivity introduces risk. “So yes, having this on when you don’t need it is a bigger issue than not having it on,” he said. However, he noted that claims of a hacker instantly stealing all data due to AirPlay being enabled are exaggerated. He referenced the Airborne flaw from last year, which required further exploitation for access.
Dave Chronister, CEO of Parameter Security, explained that while vulnerabilities were addressed, automatic connections can be problematic. “If I as a hacker wanted to exploit this, I could set up a device that would broadcast AirPlay. If a vulnerable system connects, I can send exploit code, and without user interaction, their device could be compromised,” he said.
Software Updates and Settings
Chronister emphasized that iOS updates can reset settings to “Automatic,” increasing future risks. “It is important to understand that automatic enablement of settings is something most operating systems do to showcase new features. It is the classic war between functionality and security,” he added.
Tackett noted that Apple has historically pushed updates that reset configurations to less secure defaults. He advised users to check privacy and security settings after every update and criticized vendors for this practice.
Recommendations
Tackett recommends turning off any unnecessary settings. For AirPlay, he suggests setting it to “Ask” for a balance of functionality and security. Chronister advises monitoring connectivity settings and turning off protocols like AirPlay when not in use, and ensuring trusted networks and devices for Bluetooth and WiFi.
