Take the 2-minute tour ×
Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

What key does it use to encrypt the stored passwords? If it uses the phone's unlock code, what key does it use for phones that don't have one set up?

If someone had access to the hard drive contents (e.g. by connecting it to a Linux machine), how easy would it be for them to decrypt the saved passwords?

share|improve this question
add comment

2 Answers

Not a direct answer but I too had similar concerns. With IOS 4.2, they have enabled the remote wipe ability for all iphone4 users via MobileME. So at least, if you lose your phone, you can have it wiped out remotely.

share|improve this answer
add comment
up vote 2 down vote accepted

According to an article on Yahoo News, there are known exploits for Apple's keychain, which would allow an attacker to gain access to passwords stored on the iPhone. I believe that Safari uses keychain to store the username/passwords you tell it to remember.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.