Can someone access your phone without you knowing?

iPhoneAndroidUpdated

Yes, it's possible. Official guidance from Apple, Google and the FTC points to three routes to check: someone signed in to your Apple or Google account, a harmful app such as stalkerware on the phone, or someone who knows your passcode. Each has checks you can run in your settings.

Quick answer

Someone can reach your information if they're signed in to your account, if an app on your phone shares your data, or if they know your passcode. Check the devices on your Apple or Google account, review your apps and permissions, change your passcode, and watch the camera indicator. Apple says highly sophisticated attacks are rare.

Can someone access my phone remotely?

One remote route is through your account rather than the phone itself. Apple and Google both list the devices signed in to your account, and both suggest removing any you don't recognise. Harmful apps are the other route, and both companies offer built-in checks for them.

  1. On iPhone, go to Settings > [your name], scroll to the device list, tap any device you don't recognise and tap Remove from Account.
  2. On iPhone with iOS 16 or later, use Settings > Privacy & Security > Safety Check to review which people and apps can reach your information.
  3. On iPhone, check Settings > General > VPN & Device Management. Apple says configuration profiles and device management tools may allow access to data or location information.
  4. On Android, go to myaccount.google.com > Security & sign-in > Manage all devices, and sign out of any device you don't recognise.
  5. On Android, make sure Google Play Protect is on: Play Store > profile icon > Play Protect > Settings > Scan apps with Play Protect.

Apple says most people are never targeted by highly sophisticated spyware. For those who may be, it offers Lockdown Mode on iOS 16 or later.

Can someone access my phone through Wi-Fi?

The official guidance we found is about your data on the network, not someone taking over the phone. The FTC says public Wi-Fi is usually safe now, because most websites and apps encrypt data. Get Safe Online warns about fake hotspots set up to look like a legitimate one.

  1. Send private information only through secure web pages. The FTC says to look for the lock symbol or https in the address bar.
  2. Get Safe Online suggests using well-known hotspot providers where you can.
  3. Keep your phone and apps updated, and use two-factor authentication on your accounts.

Can someone access my phone camera?

Both iPhone and Android show a light in the status bar when an app uses the camera or microphone. On iPhone with iOS 14 or later, a green dot means the camera is in use and an orange dot means the microphone. On Android 12 and later, a green indicator appears at the top right.

  1. On iPhone, go to Settings > Privacy & Security and tap Camera or Microphone to see which apps have asked for access, and turn off any you don't want. Control Centre also shows a message when an app has recently used them.
  2. On Android, swipe down and tap the green indicator to see which app is using the camera or microphone. Tap it again to manage permissions.
  3. On Android, you can turn camera or microphone access off for the whole phone with the camera and microphone tiles in Quick Settings.
  4. On Android, see every app with camera access at Settings > Security and privacy > Privacy > Permission manager > Camera.

Can someone access my phone without my password?

Apple says a unique passcode that only you know prevents anyone else from using your device, and turns on data protection, which encrypts your data. The risk is someone who already knows it. Apple says anyone who knows your passcode can view and change information on your device and Apple Account. If you think someone knows yours, change it.

  1. On iPhone, go to Settings > Face ID & Passcode (or Touch ID & Passcode), tap Change Passcode, then tap Expire Previous Passcode so the old one stops working at once. Otherwise, on iOS 17 or later, the old passcode can reset it for 72 hours.
  2. On iPhone, if you think someone added a Face ID appearance, go to Settings > Face ID & Passcode > Reset Face ID and set it up again.
  3. On iPhone with iOS 17.3 or later, turn on Stolen Device Protection at Settings > Face ID & Passcode. Away from familiar places, it needs Face ID or Touch ID for actions such as viewing saved passwords, with no passcode fallback, and adds an hour's delay before changes like a new Apple Account password.

What are the signs of stalkerware?

The FTC describes stalkerware, also known as spyware, as software someone installs on your phone without you knowing. Its signs on the phone are faster battery drain, unexpected data use, overheating, or the phone turning itself off and on. Those are weak signs alone, since ordinary faults cause them too. Its other signs are about the person:

  1. They know where you've been when you haven't told them.
  2. They know details from private conversations, or who you've been calling or texting.
  3. They've had time alone with your phone.

The FTC also notes that some stalkerware needs a rooted Android or jailbroken iPhone.

What should I do if I think someone is watching my phone?

Think about your safety before you remove anything. The FTC warns that removing stalkerware could alert the person who installed it, and that they may react if they think you're cutting off their access. Talk to someone who can help you plan first, using a device the other person can't reach.

  1. In the UK, call the free National Domestic Abuse Helpline on 0808 2000 247, run by Refuge.
  2. If you're in danger, contact your local police.
  3. Keep a record of what's happening before you change or reset the phone.
  4. When it's safe, the FTC suggests a new phone with accounts the other person can't reach, or a full factory reset.
  5. Don't restore apps from a backup, since that could bring the stalkerware back. Download them again from the app store.
  6. Change your passwords, don't share them, and turn on two-factor authentication.

Where Failshot fits

Failshot doesn't detect hacking, malware, spyware, stalkerware or remote access. Use the checks and the helpline above for those. It covers one thing: someone with your phone in their hands.

Failshot photographs whoever unlocks your phone while Failshot is on, and the camera light shows whenever it takes a photo. On iPhone, Apple doesn't let any app see the Lock Screen or use the camera in the background, so you turn Failshot on and lock the phone, and whoever unlocks it lands in Failshot and is photographed. It doesn't photograph a wrong passcode at the iPhone Lock Screen. On Android it also photographs a wrong PIN, pattern or password at the real lock screen.

Switching Failshot off needs Face ID, your fingerprint or face on Android, or your own Failshot PIN plus your answer, never the phone's passcode. So someone who knows your passcode can't switch it off. Photos stay on your phone. Failshot is for your own device only, never anyone else's, and it's coming soon to iPhone and Android.

Questions people also ask

Can someone read my messages from another phone?

Apple and Google both suggest checking the list of devices signed in to your account and removing any you don't recognise. Then change your password and turn on two-factor authentication.

Can someone see me through my phone camera?

Apps need your permission to use the camera, and iPhone and Android both show a green indicator while it's in use. On iPhone, check Settings > Privacy & Security > Camera. On Android 12 or later, tap the green indicator to see which app is using it.

Is public Wi-Fi safe to use on my phone?

The FTC says it's usually safe, because most websites and apps now encrypt data. Get Safe Online warns that someone can set up a fake hotspot that looks like the real one, and suggests sending private information only through secure web pages.

What should I do if my partner has my passcode?

Change it, and on iPhone tap Expire Previous Passcode so the old one stops working straight away. If you're worried about how your partner might react, or think they've installed something on your phone, call the National Domestic Abuse Helpline on 0808 2000 247 first.

Sources