![\"\"](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2020\/08\/passcode-600.png\")
\nA 6-digit iPhone passcode may feel secure because it has one million possible combinations. However, someone could still obtain it by watching you enter it, in some cases using specialized passcode-cracking tools such as GrayKey, a forensic tool used by law enforcement with varying success against newer iPhones.<\/p>\n
If a thief knows your passcode, they may be able to unlock your iPhone and target your saved passwords, email, verification codes, and financial accounts. This guide explains the risks and shows you how a longer passcode, biometric authentication, and Stolen Device Protection can make your iPhone harder to take over.<\/p>\n
Yes, a 6-digit iPhone passcode can potentially be cracked, but it isn\u2019t as simple as trying every combination on the screen. A 6-digit code has one million possible combinations, from 000000 to 999999. However, iPhones limit repeated guesses by introducing delays and can erase their data after 10 failed attempts if the owner enables that option.<\/p>\n
Specialized forensic tools such as GrayKey have been designed to extract data from locked mobile devices. These tools may use software vulnerabilities and brute-force techniques<\/a> to test passcodes, although their effectiveness depends on the iPhone model, iOS version, security settings, and available exploits. They aren\u2019t ordinary iPhone password-cracking apps that anyone can download and use.<\/p>\n A thief may also get your passcode without cracking it. They could watch you enter it in public, record you entering it from a distance, or pressure you into revealing it. Once they know the code and have your iPhone, they may try to access far more than the device itself.<\/p>\n Your iPhone passcode protects more than the lock screen. If a thief knows it and has your device, they may use it to unlock the iPhone and work their way through other accounts. What they can reach depends on your settings, app protections, and whether you\u2019ve enabled Stolen Device Protection.<\/p>\n Here\u2019s how the stolen-passcode domino effect may unfold:<\/p>\n Apple\u2019s Stolen Device Protection<\/a> makes this chain harder to complete. When it applies, certain sensitive actions require Face ID or Touch ID without a passcode fallback, while major security changes may also require a delay. Read our full guide to setting up Stolen Device Protection<\/a> to learn more.<\/p>\n Apple combines your passcode with hardware and software protections that make repeated guessing much harder. According to the Apple Platform Security guide<\/a>, these protections include:<\/p>\n These safeguards make ordinary passcode guessing difficult, but no protection is perfect. Specialized forensic tools may exploit software or hardware vulnerabilities instead of relying only on the normal passcode screen. A thief can also avoid the cracking process entirely if they watch you enter your code, which is why using Face ID or Touch ID securely<\/a> and choosing a stronger passcode still matters.<\/p>\n You can replace the standard 6-digit code with a longer numeric or alphanumeric passcode. Follow these steps:<\/p>\n By default, your previous passcode still works for 72 hours after you change it, in case you get locked out. If you’re changing your passcode because someone else may know it, go back to Settings<\/em><\/strong> > Face ID & Passcode<\/em><\/strong> (or Touch ID & Passcode) and tap Expire Previous Passcode Now<\/em><\/strong> to disable the old code immediately.<\/p>\n Choose a code you can remember but other people are unlikely to guess, following Apple\u2019s iPhone passcode instructions<\/a>. Avoid birthdays, repeated digits, number patterns, and codes you already use elsewhere.<\/p>\n An alphanumeric passcode generally offers the strongest protection because it can combine letters, numbers, and symbols. However, a longer numeric passcode is still a strong and more convenient choice if you find a full keyboard difficult to use on the lock screen.<\/p>\n A custom numeric code with more than 6 digits has far more possible combinations than the standard 6-digit option. Its length also isn\u2019t displayed on the lock screen, making it harder for someone watching you to know how many digits to copy.<\/p>\n Choose a custom alphanumeric passcode if you want the strongest practical option and don\u2019t mind taking longer to enter it. Choose a longer numeric passcode if you want a simpler code that still improves your iPhone passcode security. In either case, avoid names, dates, repeated digits, keyboard patterns, and any password or PIN you use for another account.<\/p>\n Stolen Device Protection adds extra security when someone has both your iPhone and its passcode. It doesn\u2019t replace a strong passcode, but it can limit what a thief can do with that code for certain sensitive changes.<\/p>\n When the feature is active, some actions require Face ID or Touch ID without the option to enter the passcode instead. These actions include viewing saved passwords and passkeys, using stored payment details, and turning off Lost Mode.<\/p>\n More critical changes require biometric authentication, a one-hour Security Delay, and another successful biometric check. These include changing your Apple Account password or iPhone passcode, adding or removing Face ID or Touch ID, signing out of your Apple Account, and turning off Stolen Device Protection.<\/p>\n By default, these extra checks apply when your iPhone is away from familiar places such as home or work. You can also set the feature to Always<\/strong> if you want the added protections to apply everywhere.<\/p>\n Stolen Device Protection may already be turned on for your iPhone. To check, or to turn it on if it isn’t:<\/p>\n You can temporarily require your iPhone passcode if you\u2019re worried that someone may try to unlock the device using your face or finger. According to Apple\u2019s Face ID security guidance<\/a>, initiating the power-off or Emergency SOS screen disables Face ID until the correct passcode is entered. The same button sequence also forces passcode entry on current Touch ID iPhones.<\/p>\n This doesn\u2019t remove or reset Face ID or Touch ID. Biometric unlocking becomes available again after you enter the correct passcode.<\/p>\n You may also see advice to press the side button five times. Both methods can start an emergency call countdown if the matching setting is turned on, “Call with Hold and Release”<\/strong> for the side-and-volume method, or “Call with 5 Presses”<\/strong> for the five-presses method. Check Settings<\/em><\/strong> > Emergency SOS<\/em><\/strong> to see which one applies to you before you rely on either shortcut. Only enter your passcode when no one else can see your screen.<\/p>\n Change the passcode immediately, even if you still have your iPhone. Someone who knows it may try to unlock the device later or use it to change other security settings.<\/p>\n Also enable Stolen Device Protection if it wasn\u2019t already active. If the person has your iPhone as well as the passcode, use Find My from another device instead of waiting to see what happens.<\/p>\n Act quickly, especially if someone may know your passcode. Apple recommends using Find My<\/a> to locate the iPhone, lock it, and protect your information.<\/p>\n Don\u2019t remove the iPhone from Find My, even after erasing it. Removing it also removes Activation Lock, making the device easier for someone else to use or resell. If you have AppleCare+ with Theft and Loss, submit your claim and wait until Apple approves it before removing the iPhone from Find My or your Apple Account.<\/p>\n If Find My wasn\u2019t enabled before the iPhone went missing, you can\u2019t mark it as lost or erase it remotely. Change your Apple Account password, secure important accounts, contact your carrier, and report the theft instead.<\/p>\n Your passcode may look like a small part of your iPhone\u2019s security, but it can open the door to your saved passwords, email, verification codes, and other sensitive accounts. A longer numeric or alphanumeric code makes guessing harder, while Face ID or Touch ID reduces how often you need to enter it in public.<\/p>\n Keep your passcode private, enable Stolen Device Protection, and know how to force passcode entry when necessary. These simple precautions can make it much harder for someone with your iPhone to take control of your digital life.<\/p>\n A stronger passcode and Stolen Device Protection help secure access to your iPhone. For more ways to look after it, Intego ONE Complete includes iPhone security settings and Wi-Fi safety checks.<\/p>\n Explore Intego ONE for iPhone<\/a>\n A 6-digit numeric passcode<\/a> has 1,000,000 possible combinations, ranging from 000000 to 999999. Predictable choices such as birthdays, repeated digits, and number patterns are easier to guess.<\/p>\n An alphanumeric passcode generally offers stronger protection because it can use letters, numbers, and symbols. A longer custom numeric code<\/a> is a practical alternative if you want something easier to enter.<\/p>\nWhat can happen when someone gets your iPhone passcode?<\/h2>\n
\n
How does Apple protect an iPhone from passcode cracking?<\/h2>\n
\n
How to change your iPhone passcode<\/h2>\n
\n
\n![\"Face](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2026\/09\/01_iphone-passcode-security-face-id-and-passcode-settings.png\")
<\/li>\n
\n![\"Change](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2026\/09\/02_iphone-passcode-security-select-change-passcode.jpg\")
<\/li>\n
\n![\"Passcode](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2026\/09\/03_iphone-passcode-security-choose-custom-passcode.jpg\")
<\/li>\n<\/ol>\nShould you use a longer numeric or alphanumeric passcode?<\/h2>\n
How Stolen Device Protection strengthens iPhone security<\/h2>\n
\n
\n![\"Face](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2026\/09\/04_iphone-passcode-security-open-face-id-passcode-settings.png\")
<\/li>\n
\n![\"Stolen](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2026\/09\/05_iphone-passcode-security-enable-stolen-device-protection.jpg\")
<\/li>\n<\/ol>\nHow to quickly disable Face ID or Touch ID<\/h2>\n
\n
What to do if someone learns your passcode<\/h2>\n
\n
What to do if your iPhone is lost or stolen<\/h2>\n
\n
Be cautious of messages claiming that Apple or another person has found your iPhone. Apple doesn’t contact you to say the device has been recovered. Don\u2019t follow unexpected sign-in links or share your passcode, Apple Account password, or verification codes.<\/div>\nStrengthen your iPhone passcode security<\/h2>\n
Frequently asked questions<\/h2>\n
How many possible combinations does a 6-digit iPhone passcode have?<\/h3>\n
Should I use a numeric or alphanumeric passcode?<\/h3>\n
What is Stolen Device Protection, and how is it different from a strong passcode?<\/h3>\n