How to Check if Your iPhone Is Hacked in Settings

iOS has no "am I hacked" button. Check five screens instead: Settings > [your name] for the devices signed in to your Apple Account, General > VPN & Device Management for configuration profiles, Face ID & Passcode for a second enrolled face, and Privacy & Security for both Safety Check and App Privacy Report. Those screens show settings somebody else could have changed; none of them scan for malware.

If you want to know how to check if your iPhone is hacked in settings, the honest answer is that no single screen tells you. What Settings can show you is configuration: which devices hold your Apple Account, whether a management profile is installed, whether a second face can unlock the phone.

Those are the things somebody with your passcode, or with your Apple Account password, would have had to change. Most of what gets called hacking on an iPhone is one of those two ordinary situations, and both leave marks in the screens below.

Where to check if your iPhone is hacked in Settings

1. Devices on your Apple Account. Open Settings, tap your name at the top, and scroll down past the account rows. Every device signed in to the account is listed. Tap one you do not recognise and choose Remove from Account. Apple's documentation says a removed device loses access to iCloud, Find My and other Apple services, and stops displaying the verification codes for your two-factor authentication.

2. Configuration profiles. Go to Settings > General > VPN & Device Management. A profile here can route your traffic, install apps or enforce restrictions, and it has to be installed deliberately, by you, by an employer, or by somebody holding your unlocked phone. Apple's guidance for an unfamiliar one is to select the profile, tap Delete Profile, follow the onscreen instructions, then restart the device. If the phone belongs to a school or a business, check with the administrator first: deleting a profile also removes the settings and data attached to it.

3. A second face or fingerprint. Open Settings > Face ID & Passcode. Face ID stores two appearances, and the row offering to add one disappears once a second is enrolled. So if Set Up an Alternate Appearance is missing on a phone where you never added one, another face may open it. There is no way to delete only the second appearance; Reset Face ID clears both, and you enrol your own again afterwards. On a Touch ID phone, the equivalent is the list of saved fingerprints on the same screen.

4. Safety Check. Open Settings > Privacy & Security > Safety Check. Apple lists it for iPhone with iOS 16 or later, signed in to an Apple Account with two-factor authentication turned on. Manage Sharing & Access walks you through what you are sharing and with whom, what apps have access to, and your device and account security, one item at a time. Emergency Reset is the blunt version: it stops sharing with all people and apps at once, then takes you through emergency contacts, connected devices, verification phone numbers and account security.

5. App Privacy Report. Open Settings > Privacy & Security, scroll down, tap App Privacy Report and turn it on. It records how often apps reach your location, camera, microphone and network over the past week. The catch is in Apple's own wording: it starts gathering information only after you turn it on, so it may take a while for details to appear. A report you enable today is empty today and useful next week.

What these checks do not do

None of the five scans for anything. There is no malware scanner in iOS, and nothing in Settings inspects your apps for malicious code. The screens above report how the phone is configured, and you are the one deciding whether that configuration looks right.

They also will not explain the symptoms most people arrive with. Faster battery drain, a phone that runs warm, more cellular data than last month: Settings > Battery and Settings > Cellular will name the app responsible, which is worth knowing, but a heavy app at the top of that list is a heavy app, not evidence of a compromise.

And Settings is not where Apple would tell you. If Apple believes your account has been targeted by mercenary spyware, it sends a threat notification three ways: an alert on your Lock Screen and in Settings, an email to the addresses on your Apple Account, and a banner across the top of account.apple.com when you sign in. Apple states that a real threat notification never asks you to click a link, open a file, install an app or profile, or give out an Apple Account password or verification code. Anything that asks is the attack, not the warning.

Common questions

Does removing a device tell whoever is holding it? Apple documents what removal does to the device, not whether its user is notified. We would not claim either way. Assume the sign-out itself is noticeable.

Should I change my passcode as well? If any of the five screens turned up something you did not put there, change the passcode and the Apple Account password both. Our guide to changing the password on your iPhone covers the device passcode, and resetting an Apple ID password covers the account.

Is a factory reset the answer? It is the end of the road, not the start of it. Work the five screens first; most situations resolve at the first or second. If you do reset, be aware that restoring a backup can bring a bad profile back with it, so read restoring an iPhone from backup for what returns and what does not.

If the option isn't there

VPN & Device Management appears under Settings > General only when a profile or VPN is actually installed. If you cannot find that row at all, that is the result you were hoping for: there is nothing on the phone to find.

Safety Check needs iOS 16 or later, an Apple Account you are signed in to, and two-factor authentication switched on. If it is missing from Privacy & Security, check Settings > General > Software Update first, then your account's security settings.

If you have worked through all five and something still does not sit right, a device you removed that comes back, or a profile that returns after a restart, that is the point to contact Apple Support directly rather than keep turning over screens in Settings.