Table of Contents

• Welcome
• Intro to Apple platform security
• • Hardware security overview
  • Apple SoC security
  • The Secure Enclave
  • • Biometric security
    • Magic Keyboard with Touch ID
    • Optic ID, Face ID, Touch ID, passcodes, and passwords
    • Optic ID matching security
    • Facial matching security
    • Uses for Optic ID, Face ID, and Touch ID
    • Secure intent and connections to the Secure Enclave
  • Hardware microphone disconnect
  • Mac on-screen camera indicator light
  • Express Cards with power reserve
• • System security overview
  • • Boot process for iPad and iPhone devices
    • Memory safe iBoot implementation
    • • Boot process
      • Boot modes
      • Paired recoveryOS restrictions
      • Startup Disk security policy control
      • LocalPolicy signing-key creation and management
      • Contents of a LocalPolicy file for a Mac with Apple silicon
    • • Boot process
      • Boot modes
      • Startup Security Utility
      • Firmware password protection
      • recoveryOS and diagnostics environments
  • Signed system volume security
  • Secure software updates
  • Background Security Improvements
  • Operating system integrity
  • • Physical pairing model security
    • Activating data connections securely
    • Verifying accessories
    • Automatically unlock Apple devices
  • BlastDoor for Messages and IDS
  • Lockdown Mode security
  • • Additional macOS system security capabilities
    • System Integrity Protection
    • Trust caches
    • Peripheral processor security
    • Rosetta 2 on a Mac with Apple silicon
    • Direct memory access protections
    • Securely extending the kernel
    • Option ROM security
    • UEFI firmware security in an Intel-based Mac
  • System security for watchOS
  • Random number generation
  • Communicating emergency information using satellites
  • Apple Security Research Device
• • Encryption and Data Protection overview
  • Quantum-secure cryptography with Apple devices
  • Passcodes and passwords
  • • Data Protection overview
    • Data Protection
    • Data Protection classes
    • Keybags for Data Protection
    • Protecting keys in alternate boot modes
    • Protecting user data in the face of attack
    • Sealed Key Protection (SKP)
    • Role of Apple File System
    • Keychain data protection
  • • Volume encryption with FileVault
    • Managing FileVault
  • • Protecting app access to user data
    • Protecting access to user’s health data
  • Digital signing and encryption
• • App security overview
  • App code signing process
  • • Intro to app security for iOS, iPadOS, and visionOS
    • About App Store security
    • Security of runtime process
    • App protection and app groups
  • • Intro to app security for macOS
    • App code signing process
    • Gatekeeper and runtime protection
    • Protecting against malware
    • Controlling app access to files
  • Supporting extensions
  • Secure features in the Notes app
  • Secure features in the Shortcuts app
• • Services security overview
  • • Apple Account security
    • Managed Apple Account security
  • • iCloud security overview
    • iCloud encryption
    • Advanced Data Protection for iCloud
    • iCloud Backup security
    • iCloud Private Relay security
    • Account recovery contact security
    • Legacy Contact security
  • • Passcode security overview
    • Sign in with Apple security
    • Automatic strong passwords
    • Password AutoFill security
    • App access to saved passwords
    • Password security recommendations
    • Password Monitoring
    • Sending passwords
    • Credential provider extensions
    • • iCloud Keychain security overview
      • Secure keychain syncing
      • Secure iCloud Keychain recovery
      • Escrow security for iCloud Keychain
  • • Apple Pay security overview
    • Apple Pay component security
    • How Apple Pay keeps users’ purchases protected
    • • Card provisioning security overview
      • Adding credit or debit cards to Apple Pay
    • Payment authorization with Apple Pay
    • Paying with cards using Apple Pay
    • Contactless passes in Apple Pay
    • Rendering cards unusable with Apple Pay
    • Apple Card security
    • Apple Cash security
    • Tap to Pay on iPhone
  • • Access using Apple Wallet
    • Access key types
    • • Car key security
      • Car key transactions
    • Adding transit and eMoney cards to Apple Wallet
    • • IDs in Apple Wallet
      • Security of IDs in Apple Wallet
  • • iMessage security overview
    • How iMessage sends and receives messages
    • Check In security
    • Secure iMessage name and photo sharing
  • Secure Apple Messages for Business
  • FaceTime security
  • • Find My security
    • Locating missing devices
  • • Continuity security overview
    • Handoff security
    • iPhone cellular call relay security
    • iPhone Text Message Forwarding security
    • Instant Hotspot security
• • Network security overview
  • TLS security
  • IPv6 security
  • VPN security
  • • Security features when connecting to wireless networks
    • Wi-Fi security with Apple devices
    • Privacy features when connecting to wireless networks
    • Wi-Fi privacy with Apple devices
  • Bluetooth security
  • Ultra Wideband security in iOS
  • Single Sign-on security
  • AirDrop security
  • Wi-Fi password sharing security
  • Firewall security in macOS
• • Developer kit security overview
  • ARKit security
  • DriverKit security
  • EnergyKit data security
  • • Communication security
    • Data security
    • Securing routers with HomeKit
    • Camera security
    • Security with Apple TV
  • NFC & SE Platform security
  • ReplayKit security
  • SiriKit security
  • WidgetKit security
• • Secure device management overview
  • • Device management security overview
    • Managed Device Attestation
    • Attestation process security
    • Configuration enforcement
    • Automated Device Enrollment
    • Activation Lock security
    • Managed Lost Mode and remote wipe
    • Shared iPad security
  • Apple Configurator security
  • Screen Time security
• Glossary
• Document revision history
• Copyright and trademarks