The NextAdvisor.com guide to iPad security and privacy

We've been playing with Apple's iPad this week. Beyond checking out its glossy screen, unibody construction, and book-like reading interface, we thought it would be interesting to check out its basic security options.

If ever there was a product designed to be stolen (or misplaced), it's probably this device. The iPad is meant to be picked up, and put down, like a magazine or a book. While people lose phones all the time, most of us are accustomed to dropping them in our pockets when not in use. With the iPad, unless you have some pretty big pockets, you can't do that at all. And unlike the laptop, there's no security slot, so you won't be able to lock it down. Apple is billing it as a casual information device, but users are bound to treat it like their smart phone or personal computer.

While iPad security is probably not the first thing you think about when you take the device out of the box, there are some things you should really do before your iPad goes missing. You'll find these options in the "General" section of the "Settings" app.

You'll find your security settings here (click for full page view)

1. Set up a Passcode Lock and make sure it's a good one. After a few days this iPad will probably have your whole life on it. This will prevent someone from accessing your personal data, should the iPad fall into the wrong hands. It will also make it fairly useless to a thief, since it can't be re-synced with a new computer without the code.

Set your iPad passcode here (click for full page view)

2. Set the auto-lock so the device will be inaccessible after a period of inactivity.

Select the period of inactivity before auto-lock is activated (click for full-page view)

3. Consider turning the iPad "Erase Data" function on. This function will wipe the data on your iPad if someone makes 10 consecutive incorrect password attempts.*

Enable the "Erase Data" feature here

4. Keep in mind that the iPad has a default "Picture Frame" mode which allows you (or anyone) to view your photographs, even if the iPad is locked, simply by clicking the flower-pot icon. If you like to leave your iPad laying around the house, make sure all your photos are safe for public eyes, or that you have this function turned off.

A locked iPad will show photos when the Flower icon is pressed (click for full page view)

4. Spending an extra $99.95 per year for Apple's MobileMe gets you the "Find My iPhone" feature which allows you to remotely locate your iPad via GPS, lock it (in case you didn't follow Step 1), and erase the data. The latter is a bit risky though, since you won't be able to use the GPS tracking or Mobile lock after you do it. Also, the remote lock and erase only work if the iPad is connected to the Internet.

MobileMe's "Find My iPhone (iPad)" Feature

5. Look out for eavesdroppers. The iPad screen has a wide angle of view, so be careful about what information you're accessing in public.

6. Be aware that while you can turn off access to some apps (such as the web browser, location-based services, and others), there's no way to restrict access to mail app. If you're using your iPad communally, you may want to use webmail, and log out after each time.

Enable iPad Restrictions

7. If this device is to be used by the whole family, think about limiting access to apps, disallowing app installation, and setting age restrictions.

We wrote this guide thinking that most users will start to treat their iPads like their computers or smart phones. Of course, it's possible that you'll just use it around the house for casual browsing and not use the integrated mail app. If so, well, you can probably lighten up  on the security precautions. Stay tuned for a future blog post on how to leave your iPad laying around the house.

* We actually tested the "Erase Data" function out. The bit about "10 attempts" is misleading. Here's how it actually works:

The iPad's "Wrong Passcode" Display

1. Enter the password incorrectly 10 times in a row, and the device tells you to try again in one minute.

2. Make another 10 incorrect attempts and it locks down for five minutes.

3. Make one more incorrect attempt and it locks for 15 minutes.

4. Another try, this time you're out for 30 minutes

5. Another incorrect attempt locks you out for 1 hour.

6. Try it again, and you're locked out for another hour.

7. If you fail this time, the device resets to its factory condition.

Much like the remote-wipe function, this feature has pluses and minuses. While it protects your data from a patient thief, deletion of your data has two consequences. First, your remote Find My iPad features will be disabled, so there's no GPS tracking. Secondly, while you save your data, you provide the thief with essentially a brand new iPad because your passcode is deleted with everything else. While this is better than giving out your personal data, it's too bad it doesn't just make the iPad unusable.

• Tweet

<< Back to NextAdvisor blog