Take the 2-minute tour ×
Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

Me and my girlfriend are using facetime regularly for talking. I'm worried if anyone can hack our Facetime calls and record our videos? Is it possible? How safe is Facetime?

share|improve this question

closed as primarily opinion-based by bmike Jun 2 at 12:52

Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise. If this question can be reworded to fit the rules in the help center, please edit the question.

    
First tell us how you making the call. Are you on safe (private) internet or in Starbucks. –  Buscar웃 May 6 '13 at 20:47
    
Hi Thanks for the comment.. We make calls in our mobile data connection and sometimes in home wifi.. –  shnan May 23 '13 at 16:31
    
I think w have enough answers here. If the "anyone can hack" has more specifics then this would be an excellent candidate for further answers. Also the edit should have one clear question, not three. –  bmike Jun 2 at 12:53

4 Answers 4

FaceTime calls are encrypted sufficiently for most anyone's needs. FaceTime's encrypted stream acts underneath any other WiFi encryption that might also be present. If you feel that end-to-end data streams encrypted with unique keys for each recipient is safe, then I'd say have fun with FaceTime.

Someone with special skills, tools and time could probably crack it, but you probably don't have a high enough profile to be worth the time/effort.

share|improve this answer
    
I would add that everyone should assume anyone that operates your network can and will record all of the packets - so the fact that you are communicating with another device - for how long and what volume of data is being transmitted is able to be captured, logged and analyzed at a later date. Whether someone is motivated to try to crack the encryption keys used depends on whether you and your girlfriend are otherwise famous or of interest to people that want to know what you are saying or showing. –  bmike May 6 '13 at 21:49
    
I'm the type of person who hacks network systems just for the lolz, regardless of how insignificant they are :P A lot of people seem to freak out about the security of their data, when in reality, they're insignificant enough to be safe lol –  XAleXOwnZX May 6 '13 at 23:10
    
Agreed that the fear of being insecure pales in comparison with the risks in many cases. It would be interesting to see what was necessary for a successful MITM attack on FaceTime given how Apple has engineered the certificate end points. For most, I'd say securing their phone physically would be worth more attention that whether someone can eaves drop on a FaceTime call. –  bmike May 6 '13 at 23:28
2  
Even if one COULD pull it off, what über top secret information would someone find over a FaceTime call? I couldn't find a less professional way to transmit sensitive data. I lied, snap chat might be a bit worse. –  XAleXOwnZX May 7 '13 at 2:20
1  
@shnan If this answer solved your question, click the checkmark next to it. –  Jop V. Jun 11 '13 at 19:44

FaceTime is quite secure. In Feb 2014, Apple published a white paper on the security used in various iOS services, which finally brought to light some of the features that others had previously inferred or guessed at. The section for FaceTime states:

FaceTime is Apple’s video and audio calling service. Similar to iMessage, FaceTime calls also use the Apple Push Notification Service to establish an initial connection to the user’s registered devices. The audio/video contents of FaceTime calls are protected by end-to-end encryption, so no one but the sender and receiver can access them. Apple cannot decrypt the data.

FaceTime uses Internet Connectivity Establishment (ICE) to establish a peer-to-peer connection between devices. Using Session Initiation Protocol (SIP) messages, the devices verify their identity certificates and establish a shared secret for each session. The nonces supplied by each device are combined to salt keys for each of the media channels, which are streamed via Secure Real Time Protocol (SRTP) using AES-256 encryption.

share|improve this answer

As far as I have read, you should assume your Facetime traffic is completely unencrypted. There have been assertions by Apple of encryption (the ZDNet article linked above), but they talked about using WPA2. WPA2 has nothing to do with encrypting the voice/video traffic. WPA2 is about making wireless connections to an access point private. Your Facetime traffic is sent to the AP, then to your router, then to your ISP's router then all over the place before it gets to your gf's home network or cellular provider/device. I should note that I have not done a protocol analysis of the Facetime protocol; I'm going by the published statements.

Saying that WPA2 answers the question is like being confident in transporting large sums of money to the bank using an armored truck only between the loading dock and the edge of the parking lot and then putting the money into a Corolla and driving it the rest of the way to its destination.

share|improve this answer
    
This is incorrect. The article from ZDNet quotes an Apple rep: "In addition to your existing infrastructure each FaceTime session is encrypted end to end with unique session keys." ZD's remarks about the devices themselves being HIPAA compliant themselves relate to the level of security the users chose for their wireless infrastructure and do not pertain to Facetime itself. The article is vague when identifying that as the actual topic, since the conversation was spurred from FaceTime security. –  smoooosher Apr 16 at 22:49

My partner and I were using facetime, when my partner got a message asking to accept or decline facetime conversation, she thought it was from me as we had just connected a minute beforehand, she pressed accept and a guy laying on a bed started saying hello!!!!! she shit herself and hung up immediately, so tell me it is secure, yes she accepted but I believe that this dude was already able to see her and wanted her to see him!!!!!

share|improve this answer

Some of the information contained in this post requires additional references. Please edit to add citations to reliable sources that support the assertions made here. Unsourced material may be disputed or deleted.

    
Anybody with an iDevice or a recent Mac can initiate Facetime calls to any number/e-mail address he/she knows (that's same as with traditional landline phones where anybody can call you). It's up to you to pick up video calls from unknown numbers... –  patrix Jun 2 at 12:24
1  
Some people believe in things others find ridiculous. Could you edit this to explain the basis for your beliefs about security. A locked vault door isn't secure if you open it to random strangers. –  bmike Jun 2 at 12:51

Not the answer you're looking for? Browse other questions tagged or ask your own question.