Unlocking passcode on dead partners iPhone

Do not trust anyone other than Apple. They have procedures in place to allow authorised relatives access to the deceased’s account. They are the only ones who can safely provide access to the data.

https://support.apple.com/en-gb/102431

It should be possible to do this via Apple Support without needing to go to a store.

For anyone who has Apple devices and isn’t yet in this unfortunate situation, make sure you have a Legacy Contact set up.

https://support.apple.com/en-gb/102631

Can she log into his email, might be able to recover photos from icloud rather than the device.This would be easier

I think Apple are very hardcore with this sort of stuff so might be a challenge to unlock phone.

Am I alone though thinking that it's a bit odd that this blokes partner didn't know his passcode, he didn't have biometrics set up or have her as legacy contact? Apple make this stuff so easy its almost harder to not do it. Given that he seems quite secretive, is there a risk that the phone contents might cause more distress?

I wouldn't trust downloaded software at all

but like a lot of us, we are only wise after the event

just like wills and many other necessary preparations for the inevitable end.

like you say, a lot goes on in the immediate aftermath of someone’s death. Is opening the iPhone really that high up the list?

As they’re pretty secure by design getting into it is meant to be an almost insurmountable problem.

Reading the Apple support page it looks like the iPhone cannot be unlocked without the passcode. But the associated iCloud account can be accessed. Let’s hope your friend’s husband used iCloud Photos otherwise it does not look these are going to be seen again.
https://support.apple.com/en-us/102431

The only inexpensive and almost practical way I’m aware of being able to open an iPhone and gain access to the content is a brute force hack - write a list of ‘socially engineered’ passcodes and try those. The iPhone quickly starts to time you out. To the extent that we rooted out one my children’s iPod Touches from childhood, they could not remember the passcode. We tried the expected ones. No luck. We were quickly at an unfeasible time out and reset it to factory settings. NP, most of the photos were on iCloud and in their Mac’s photo library.

sorry to hear about your friend’s bereavement. And sorry I can’t offer more help.

I’ve been through this unfortunately. Firstly, condolences.

Best thing is to speak to Apple. I had to wait for death certificates and then cooling periods, I’m afraid it took over six months in the end.

Give them a ring  https://support.apple.com/en-gb/102431

Am I alone though thinking that it’s a bit odd that this blokes partner didn’t know his passcode, he didn’t have biometrics set up or have her as legacy contact? Apple make this stuff so easy its almost harder to not do it.

I don’t think it is odd. Apple biometrics (Face ID?) probably won’t work. I don’t really have any need access my wife’s phone or vice versa. It isn’t easier to set up a legacy contact than not, doing something rather than nothing is always going to result in people not doing it.

I don’t think it’s odd at all.

The only inexpensive and almost practical way I’m aware of being able to open an iPhone and gain access to the content is a brute force hack – write a list of ‘socially engineered’ passcodes and try those. The iPhone quickly starts to time you out. To the extent that we rooted out one my children’s iPod Touches from childhood, they could not remember the passcode.

Don’t try this. There is a setting on an iPhone where after 10 failed passcode attempts the phone will be wiped. You have no way of knowing if this setting is enabled or not.

Go through Apple, get access to the iCloud account, log into that to find out if iCloud Photos and Backup have been used, then decide how to proceed with the device. Don’t do anything with the device at the moment. Just leave it powered off in a safe place.

Am I alone though thinking that it’s a bit odd that this blokes partner didn’t know his passcode, he didn’t have biometrics set up or have her as legacy contact?

Probably.

As mentioned Apple is your only hope, biometrics will not work.

I have no help. Sorry to hear of this, and good on you for helping out your friend.

Hopefully the photos have been backed up to iCloud. Apple should be able to help reset that password (will make you jump through hoops I’m sure if this hasn’t been arranged in advance though) which should at least get you access to the photos (if they’ve been backed up)

you won’t be able to get access to the phone itself, it’s not possible, not even Apple can (or would) do that for you. Absolutely ridiculous that the hospital are even suggesting getting the mortuary to attempt it! Biotmetric access is locked after 48hrs inactivity, in any case.

It shouldn't be possible.  It completely defeats the point of having a passcode in the first place if it's bypassable.  I would be both astonished and disappointed if Apple had the means let alone the inclination to unlock it, that would be a serious concern.  A password reset for cloud storage, maybe.

I have nothing to hide, but on principle I'd be royally pissed if anyone accessed any of my accounts posthumously without my explicit permission.

Hospital said if it is a fingerprint lock then she can get that from her husband via the mortuary or undertakers which frankly, is grim.

Modern fingerprint readers use ultrasonics which detect a pulse, so that probably won't work either.

I’d be royally pissed if anyone accessed any of my accounts posthumously without my explicit permission.

No you'd be dead.

There are a miriad of reasons why they might need access and another bunch for why they might not have shared  passwords yet.   We don't all get a chance to tick the checklist before life turns on us.

I have no idea what my wife's passcode is but its made me think I should share mine so she has information  access to the bank accounts and insurance policies that sit in my name.

Biotmetric access is locked after 48hrs inactivity, in any case.

You can still use the thumb ID. Number pad will still show as its there as a backup or for reboots.

wife knows my code, I've nothing to hide in phone if she want to look a my shit pics of bikes dogs and trails she is welcome to rummage.

like you say, a lot goes on in the immediate aftermath of someone’s death. Is opening the iPhone really that high up the list?

Given how much "life" stuff (banking, social media etc) is done solely from a phone, potentially yes.

I know my Mum's passcode - I've never had cause to use it and I never would without her express permission but if she's dead it'll be a huge help to get in there and access her info.

My sister is set up as the backup on my account. She'd have to wait for Google to try its automated "if you haven't used your account for x months we'll do this" safety checks but after that, she'd have access to everything.

There are a miriad of reasons why they might need access and another bunch for why they might not have shared  passwords yet.   We don’t all get a chance to tick the checklist before life turns on us.

Nonsense.  It's hardly an onerous task to go "hey, my PIN is 1234" at some point in the years/decades you've been together.

You wouldn't be advocating that people  should not change passcodes and passwords  semi regularly would you ?

You wouldn’t be advocating that people  should not change passcodes and passwords  semi regularly would you ?

My previous employer stopped this practice because it got so onerous that people were basically choosing weaker and weaker passwords or simple variations on a theme. It became a massive ballache when logging on and every 2 months the system would say "you need to change your password..." and everyone would sigh and opt for Password2 instead of Password1.

https://www.ncsc.gov.uk/blog-post/problems-forcing-regular-password-expiry

No one said force . But to suggest that you have the same passcode permanently  seems odd - perhaps the conversation that you had changed it hasn't happened yet by the time the number 52 goes wallop on your walk to work

There is a setting on an iPhone where after 10 failed passcode attempts the phone will be wiped

it’s an option. It has to be enabled. You are right that you don’t know whether it is enabled or not before it happens.

Thanks for the replies. I've suggested caution before trying anything, keep it charged and on until the funeral has been arranged and then, when things have calmed down. She is a little distressed that any photos etc etc will be erased, but it can all wait for a little while.

Is opening the iPhone really that high up the list?

For her, its a niggle on top of a lot of things that have just piled in with the death of her husband and I'm trying to take this little irritant away, or park it for a little later. She has enough to sort right now without this worry.

Some good info up there, thanks for that.

You can still use the thumb ID. Number pad will still show as it’s there as a backup or for reboots.

https://support.apple.com/en-gb/101612#:~:text=If%20you%20need%20to%20enter,device%20in%20over%2048%20hours

You wouldn’t be advocating that people  should not change passcodes and passwords  semi regularly would you ?

Yes.

and everyone would sigh and opt for Password2 instead of Password1.

I was up to Passw0rd29 on my work PC when Corporate decided that was too obvious. A few of my longer serving colleagues were into triple figures and mighty annoyed at the change. Corporate also decided that all PCs would auto lock after 15 minutes inactivity or when the screen saver came on, whichever happened first. As someone who is often working away from the computer but referencing technical drawings this was a PITA. After some resistance from Corporate the local IT bod managed to get me a facial recognition thingie.

But to suggest that you have the same passcode permanently seems odd

Surely the only time people change their password/pin is when forced to by policy or when they think it's been compromised?

I have a pretty secure/long password at work since they stopped making us change it every 3 months, before that we used to all write them down in a diary or deskpad or it would be done in a way based on months or seasons etc that was easy to remember. (And everyone would regularly forget it)

We still have some legacy systems that want a password change every 30 days and if someone worked out my method 20 years ago they would still be able to get it today within a couple of guesses!

I was up to Passw0rd29 on my work PC when Corporate decided that was too obvious. 

We used to get our passwords reset via humans and they would often choose p1easechange or over2you and it would force you to pick a new password.  I know one colleague was up to over17you before they made us select longer, permanent passwords!

But to suggest that you have the same passcode permanently seems odd

I’ve only changed mine when they moved from 4 digits to 6, the first 4 digits are the same the my previous 4.

Was going to mention 21CFR11 and associated rules related to password maintenance but that is so far from the OP’s question that I’ll just say:

OP Apple will not unlock this iPhone. IRL no one can unlock it except by, potentially destructive, brute force hacks. If the living partner wants the photos then their best hope is iCloud access with appropriate documentation.

the lesson learned is: prepare for the inevitable in the best way possible.

Can totally relate to this, whilst supporting p20s brother-in-law after the death of his wife/p20s sister. The phone thing was really bugging him. Anyway, after 5 or so failed attempts carefully during the day, we suddenly remembered the dogs date of birth…! He cried with absolute relief. I can appreciate what your friend is going through as a result. Good luck with the Apple route.

Thankfully I know p20s and he knows mine.

Am I alone though thinking that it’s a bit odd that this blokes partner didn’t know his passcode, he didn’t have biometrics set up or have her as legacy contact?

It would have to be a pretty old iPhone to have TouchID, they’ve been FaceID for some years now, and my late partner didn’t have the 6-digit passcode for my phone or pad. I may well have given it to her eventually though.

You wouldn’t be advocating that people should not change passcodes and passwords used semi regularly would you ?
Yes.

Indeed, see above - it’s a pointless waste of time making people change passwords on a regular basis, real tech security experts have been saying it for ages, it just forces people to choose a simple password and add an incremental digit to the end. It’s what everyone did at the last place I worked, and that was on the tablets we were issued. Which was even more annoying, because they didn’t hold any information that was particularly important or useful, just vehicle registrations and their locations within the site.

But to suggest that you have the same passcode permanently seems odd
I’ve only changed mine when they moved from 4 digits to 6, the first 4 digits are the same the my previous 4.

Exactly the same here. It’s only FaceID that’s changed anything, my passcode, or the first four digits, I’ve used since I got my first iPhone 3G.

Hunt around the house in obvious places for it written down or at place of work.

Desk drawer.

Important documents folder.

Under keyboard.

Sock drawer.

Etc depending on the individual and where you might think they would put this.

Take it to a mobile phone repair /vape shop and ask them.

So that he can be told it can't be done by more people?

I suggest the OP post the same question in a few more forums 🙂

It would have to be a pretty old iPhone to have TouchID

Current model iPhone SE is still TouchID. My work phone is a pain because of this.

Hunt around the house in obvious places for it written down or at place of work.

Desk drawer.

Important documents folder.

Under keyboard.

Sock drawer.

Etc depending on the individual and where you might think they would put this.

Not a bad shout actually - my Mum has a little "passwords book" although she does occasionally misplace it.

Her insistence on writing stuff down will come in handy one day!

It would have to be a pretty old iPhone to have TouchID

So? Nobody said what model it was, my daughter is running about with a 7.

But to suggest that you have the same passcode permanently seems odd

Seems even more odd to suggest you would change your pass code for no reason, I've had the same one for 24 years now.

Just to close this thread and something which may help others. As has been mentioned up there ^^^, we can be wise after the event but this may not give any options for information recovery on accounts after a family member dies without disclosing or sharing log in details.

The funeral of my friends husband was on the 24th of last month and as mentioned, fingerprint unlocking didn't work, Meg tried this, no avail. The phone has been on standby since Tom died and not touched.

If Tom didn't use icloud and kept things only on his phone, Apple won't share anything or allow access.

The only thing, in this case that "might" get access is if Tom backed up pictures etc etc to icloud. Apple need a death certificate, they consider the application and may share the icloud pasword after they have considered the case.

After sharing the icloud password, the phone contents are erased and no longer available.

Thanks everyone who made suggestions. It's a waiting game for Meg to see what Apple offer next.

So, recommendations are a little book of passwords stashed where the relatives know where it is (my mum does this)

Or from Ben above,

For anyone who has Apple devices and isn’t yet in this unfortunate situation, make sure you have a Legacy Contact set up.
> https://support.apple.com/en-gb/102631

Is an interesting thing to ponder.

I know my wife’s PIN code to get in her phone, but most of our banking, insurances etc accessed via Face ID .

The phone keeps a record of the actual password I assume, but I don’t think it actually shows the passwords ie they are asterisk

This must mean now that all the big companies ie Apple / Google must have to have departments now that deal purely with deaths

@FunkyDunc FaceID  or any other biometric identifier on Apple devices is a toggle switch within the banking/insurance/utility app. An option to login with a password should present if biometrics fail depending on how good the programming is.

I would ask anyone who is on EoL care to remove biometric login from everything while they are still capable. I would also recommend that we all run a password manager with partners master password in your own manager and vice versa. Most big companies run a bereavement team and will assist with getting you access to a partners info on receipt of a death certificate, some are better than others. Having access by password will help get around the more obstructive ones.

So, recommendations are a little book of passwords stashed where the relatives know where it is (my mum does this)

I have an address book tucked away with everything in that might be useful to my partner or kids after I'm gone

So, recommendations are a little book of passwords stashed where the relatives know

Good plan.

Because he had kept them as an aid memoir, I was able to trawl through a number of my friends journalists notebooks for various scribbled passwords etc but I didn't get into his apple account because he had used his landline number as 2 factor authentication & I'd already cancelled his BT account.

Yeah, a list of passwords might help with some accounts but thanks to the rise in 2FA/MFA you really need phone access for authentication too.

The more I think about this, the more I'm wondering,

What is on someone's device that a partner would need to access after their death which wasn't shared with them whilst the deceased was still alive?  The OP suggests "memories" - WTF does that mean?

I'll hold my hand up here, I'm guilty of this.  All the household bills etc are done electronically wherever possible and that's all through my accounts.  But that is absolutely a failing on my part, I need to have proxies / paper backups for if I check out before she does.  If nothing else, this thread has given me a kick to sort that out for her.

The idea that someone would just be handed the keys to my accounts though... I mean, it's not even about me, I've had conversations with friends who have told me deeply personal things in strictest confidence.  How about historical intimate conversations with an ex before they even met, is that something that they'd want to read?  I trust my partner implicitly, but I don't think other people would necessarily appreciate her going through their dirty laundry.  It's a violation of privacy.

I understand the desperation, but no good will come from a grieving partner going through a deceased loved-one's phone desperately looking for breadcrumbs.

Electronic legacy is interesting discussion and should be planned for when all parties are alive and well. Which is easier said than done, I know

Talk about memories usually means photos and videos, for my part I have shared my Google photos with Mrs, there isn’t much else in digital format for me to leave behind except some Kindle books and dodgy post histories on few forums.

What is on someone’s device that a partner would need to access after their death which wasn’t shared with them whilst the deceased was still alive?  The OP suggests “memories” – WTF does that mean?

I understand the desperation, but no good will come from a grieving partner going through a deceased loved-one’s phone desperately looking for breadcrumbs.

The difference I see is that while alive I have actively given OH access to my emails for all the practical stuff, and we have a shared Google photos system. But that is active permission, so I tend to agree with you.

So the message is: sort you digital life out with those who matter.

Electronic legacy is interesting discussion and should be planned for when all parties are alive and well. Which is easier said than done, I know

It is being more considered now in the world of social media:
https://uk.pcmag.com/security/147526/how-to-prepare-your-digital-life-for-your-death

Related note: when a friend split from her partner, I remember it took them ages to "disconnect" electronically - all their online banking, joint accounts, social media stuff, shared folders etc, all on the one (shared) laptop.

It is being more considered now in the world of social media:
https://uk.pcmag.com/security/147526/how-to-prepare-your-digital-life-for-your-death
/blockquote>
Good tips on FB, IG etc but I wouldn’t trust any online password service to be around in few years time, as services tend to come and go.

 

The idea that someone would just be handed the keys to my accounts though… I mean, it’s not even about me, I’ve had conversations with friends who have told me deeply personal things in strictest confidence.  How about historical intimate conversations with an ex before they even met, is that something that they’d want to read?  I trust my partner implicitly, but I don’t think other people would necessarily appreciate her going through their dirty laundry.  It’s a violation of privacy.

It all depends on what you’re likely to have on your phone, or other devices, though, isn’t it. I have nothing that I’d care about after my sad demise, basically because I don’t put anything down on paper or store electronically that would embarrass anyone. It’s also easy to password protect various things, and iOS 18 will be even more comprehensive in that individual notes, etc can be password protected, as well as individual apps. So the separate folder in your Photos library with all of the compromising photos showing tractor porn can be safely locked away, never to see the light of day!

Apart from my banking stuff (bank accounts, share scheme, etc.), nothing on my electronic devices would be embarrassing.

If/when I'm having chats with mates on deeply personal stuff, the chat gets deleted after the discussion is sorted. Absolutely no need to keep that stuff floating about.

Something else to add to my list of stuff to sort out and speak to people about, so they know what my version of the 'plan' is meant to be.

The situation that started this is on the way to being resolved but I wonder... Apple run the OS and the phone so can help with iphones, as in the original case. Nothing but iCloud backups will be accessed. All contacts, whatsapp, texts will not be shared.

What is a recommendation for "Android" as that is the OS, but Samsung, Motorola, Ule, Blackview etc etc ...

Similar situation with an Android phone and deceased partner. No password, phone locked....

Yeah, a list of passwords might help with some accounts but thanks to the rise in 2FA/MFA you really need phone access for authentication too.

This is a good point.  We use a paid password manager (LastPass) that has a mechanism where if one of you disappears/dies the other can get access to the account info after a certain time.  That doesn't resolve the 2FA thing but in any case we know each others phone PIN so not a problem, but that isn't really a 'proper' solution and doesn't work for everyone (and nor should it really).

I use bitwarden and partner knows or can access my account.  Phone access is shared anyway

What is on someone’s device that a partner would need to access after their death which wasn’t shared with them whilst the deceased was still alive?

Well my dad hung himself so there's that.

Every household account was in his name.

I realise there's a correct way of sorting that and a right way of doing it, the correct way is a pain in the arse and despite changing account names my mum was still getting letters addressed to 'The Estate of....'

Ultimately there was no note and no closure other than accepting it was the actions of a very ill and desperate man so no, no good came from that angle but being able to systematically go through accounts to cancel payments and close them down is a lot less stressful than trying to speak to someone in a call centre who wants a death certificate and might not even understand the situation.

Talk about memories usually means photos and videos

Sure. But photos and videos never seen outside of that device can't be that important. If they were they'd already be shared on OneDrive / Facebook / Flickr / GDrive / Twitter / home NAS / etc etc.

So the message is: sort you digital life out with those who matter.

100% this.

It is being more considered now in the world of social media:

I have friends whom I only know online. It's easy to dismiss them as "online friends" but some I've known for over half my life. If I dropped dead tomorrow, would they even know beyond "Alan's gone quiet"?

How about this place? I've met a few people from STW in Real Life(tm) but don't know anyone sufficiently well enough for them to realise to raise a flag if something happened to me.

It all depends on what you’re likely to have on your phone, or other devices, though, isn’t it. I have nothing that I’d care about after my sad demise, basically because I don’t put anything down on paper or store electronically that would embarrass anyone.

That's easy to say. Is it true?

As a random example, recently I was talking with a friend going through a divorce, he told me a degree of things in confidence (online) that I know he wouldn't want anyone else to read. I would be astonished by - and probably deeply distrustful of - anyone genuinely walking around not holding someone else's secrets.

... a lot less stressful than trying to speak to someone in a call centre who wants a death certificate and might not even understand the situation.

One thing I discovered from helping after my dad died and taking full responsibility more recently after my mum passed, many larger organisations have a dedicated Bereavement department.  Not really directly relevant here but just mentioning in case it helps anyone.

Eg.  When my dad died, Carphone Warehouse were Olympic-grade incompetent bastards.  "My dad's dead" - "ok sir, I understand, can I speak with him to confirm?"  On maybe the fifth phone call, one of them suddenly went "oh, you need our bereavement team, I'll put you through!" and they couldn't have been more helpful.  So frustrating that it took so long to speak with someone sensible when they have an actual team explicitly to deal with this stuff.

That’s easy to say. Is it true?

As far as I’m aware, yes. I only have one brother, no other close relatives only cousins and apart from some social media posts, and texts/Messages between various friends and acquaintances, there’s nothing else of any real consequences on my devices. I don’t have any secrets that I’ve squirrelled away that anyone else would give a shit about, especially if I’m not around to care anymore. *shrugs*

Oh, and still not able to use emoji’s on my phone on here, I see.

Sure. But photos and videos never seen outside of that device can’t be that important. If they were they’d already be shared on OneDrive / Facebook / Flickr / GDrive / Twitter / home NAS / etc etc.

Discussion moves to philosophical level - does the photo that is never shared really exist 🙂 My guess is that fraction of people’s photos taken with phone are ever shared. And that is a mostly a good thing. 

Anyway, the lost one might have mentioned that “I have picture of important document / my house’s electrical layout / lost Inca treasure on my phone “ but has never shared it. On cases like those the contents of the phone might become very interesting.

Sure. But photos and videos never seen outside of that device can’t be that important. If they were they’d already be shared on OneDrive / Facebook / Flickr / GDrive / Twitter / home NAS / etc etc.

A lot of assumption going on there.