Change this setting today.
NurPhoto via Getty Images
Updated, Oct. 22 with an unfixed iPhone bug that is stopping users changing their security settings, and news on when that will be addressed by Apple.
If you have an iPhone, you’re likely running iOS 26. But be warned. There’s a dangerous hidden setting buried in your phone that you must change. Apple doesn’t often make mistakes when it comes to security and privacy. But it has done so here.
We’re talking Apple’s excellent new defense against malicious accessories plugged into your device. While over-the-air, wireless, remote attacks grab headlines, your phone is as likely to be compromised by a cable as a WiFi or cellular connection.
Forbes‘Crisis Mode’—Has Your iPhone Really Been Hacked?By Zak Doffman
This is why both Apple and Google have added time-outs to iPhone and Android phones to return devices to their before first unlock (BFU) state to stop forensic software from exfiltrating phone data. And it’s why juice jacking is still newsworthy.
These so-called “Wired Accessories” options can be found in Settings > Privacy & Security > Security. Apple explains that you have the following options:
- “Always Ask: approve every accessory manually, every time.
- Ask for New Accessories: approve new accessories manually the first time they connect.
- Automatically Allow When Unlocked: approve accessories automatically when they connect to your unlocked iPhone or iPad (default setting).
- Always Allow: approve all accessories automatically when they connect.”
As you can see, the default setting is to automatically allow new wired/physical accessories to connect when your iPhone is unlocked. This is dangerous. And so is the worst option of all: to “always allow” connections. Either of the other two are fine — always ask or ask when connecting any new accessory.
Change your Wired Accessory settings now.
Apple iOS 26 / @UKZak
I warned all iPhone users to change this setting when iOS 26 was first released. And more such warnings are now being issued (1,2). TSA and others say that juice jacking remains a threat, even as FCC assures otherwise. But irrespective of that, you should be warned before connecting a new accessory to your phone in its unlocked state.
A physical accessory plugged into your iphone is a risk if it is afforded trusted status just because your phone is unlocked. I’m not sure why Apple set the default as it did. But it’s an easy change to make. You should do that now. It takes just a few seconds.
Meanwhile, a serious word of caution. Readers have reported a known issue with iOS 26 that may prevent you changing these settings until it’s fixed. It doesn’t affect all phones, but multiple users have reported the issue to me.
I’ve been told that all the options may be greyed out, or you may just see the “Always Allow” and “Allow When Unlocked” options, neither of which is a good, secure option for your iPhone. Ironically, it’s the two acceptable options that appear broken.
ForbesGoogle’s App Tracks Your Phone Online—One Click Stops ItBy Zak Doffman
You may be advised to reset your iPhone’s settings to restore the Wired Accessory options ahead of an iOS 26 fix. Whilst this is apparently still in the works, it’s a huge inconvenience to reset your phone. You can leave the settings on their default ahead of the fix, just be wary of plugging anything into you phone whilst it’s unlocked.
There is no general information available on this bug as yet, but I’m told Apple is advising some affected users this will be addressed in the next iOS update. Whether this is the imminent iOS 26.0.2 or the more material iOS 26.1 remains to be seen.