How to Use Apple Safety Check on iPhone: The 3-Tap Setup and Its Blind Spot

Apple shipped Safety Check in the iOS 16 update in September 2022, built with advocacy organizations including the National Network to End Domestic Violence to address a scenario Apple had no tool for: a person who needs to cut an abuser out of their digital life quickly, and ideally without being noticed while doing it. Many iPhone owners have never opened it. Even fewer know it has a structural blind spot Apple does not advertise. Here is how to use Apple Safety Check on iPhone, and what to pair it with for the threats Apple's own feature was never built to see.

How to open Apple Safety Check on your iPhone

The path is three taps, and it takes under two minutes end to end:

1. Open Settings on the iPhone Home Screen.
2. Tap Privacy & Security and scroll down.
3. Tap Safety Check to enter the tool.

The feature only runs on iPhone, not iPad or Mac, and only if the device has iOS 16 or later with two-factor authentication on the Apple Account. If the iPhone is shared with the person being cut off, or if that person knows the passcode, change the passcode first. Safety Check lets you change the passcode from inside the menu if it is not already done.

Inside Safety Check, Apple offers two paths. Emergency Reset cuts the most in one motion: it revokes every person's access to shared information, resets system privacy permissions for all apps, walks through signing devices out of the Apple Account, and prompts changing the passcode and Apple Account password. This is the move for a survivor who needs a clean cutoff and does not have time to audit each relationship individually.

Manage Sharing & Access is the slower, surgical version. Apple lists every person currently receiving data from the phone alongside the specific information shared (location, photos, notes, calendars), every app granted sensitive permissions, and every device signed in to the Apple Account. Each one can be revoked individually. The Hotline, a domestic violence support organization, warns that changes made through Safety Check can be noticed by the person whose access is being revoked, which is the case for using the Manage Sharing path when abrupt cutoff could escalate the danger.

One design choice deserves its own paragraph: the Quick Exit button in the upper right corner. Tapping it saves whatever changes have already been made and returns the phone to the Home Screen, leaving no visible trace that Safety Check was open. For someone using the feature in the same room as the person they are cutting off, this is the difference between using it and not using it at all.

What Apple Safety Check cannot see

Safety Check shows who has access through Apple's own systems: Find My location sharing, iCloud photo sharing, signed-in devices, and app-level permissions the user granted. It does not check for everything a sophisticated stalker could install.

The biggest gap is Mobile Device Management profiles. A malicious MDM profile, installed by someone with physical access to the phone, can track location and exfiltrate data while remaining invisible to Safety Check. These profiles live at Settings > General > VPN & Device Management, a separate menu Safety Check does not surface. Check it manually. Anything unfamiliar should be deleted.

Commercial stalkerware is the second gap. In February 2025, TechCrunch reported that three near-identical stalkerware apps (Spyzie, Cocospy, and Spyic) had more than 3 million combined customers, with a single security leak exposing 518,643 Spyzie customer emails. On Android, most of these tools require physical access to install. On iPhone, the story is different: the iOS variants typically work by either installing an MDM profile during a few minutes of physical access, or entirely remotely via iCloud credential theft, which lets an abuser read backups and location without ever touching the phone. Kaspersky's State of Stalkerware report counted nearly 31,000 mobile users directly affected by stalkerware in 2023, but the Coalition Against Stalkerware estimates the true global figure at closer to one million per year, because Kaspersky only sees its own telemetry.

Safety Check was not designed for any of this. It was designed for a partner with a passcode.

iVerify catches what Apple Safety Check misses

The tool that does hunt for what Safety Check ignores is iVerify, a scanning app built by the security firm Trail of Bits. It works around Apple's restriction that prevents one iOS app from scanning another: instead of looking at app files, iVerify looks for the anomalies that exploits leave behind. That includes jailbreak indicators and signatures of known-bad files and folders associated with commercial spyware, plus behavioral anomalies that indicate iOS security has been degraded by an exploit.

On March 3, 2026, iVerify announced it had identified the first known mass iOS exploit campaign, a framework they called Coruna delivering a payload dubbed CryptoWaters. The same framework was also observed in use by Russian threat actors targeting Ukrainians, which is what elevated the March disclosure from a commercial finding to a geopolitical one. Same day, iVerify made its Basic app free for iOS through May 2026. A forensic scan takes about ten minutes, runs in the background, and returns a device-health report. After May, iVerify Basic reverts to its normal $0.99 one-time charge on the App Store; iVerify Enterprise pricing starts at around $3 per user per month.

The recommendation is simple. If the threat is a partner who knows the passcode, Safety Check handles it. If the threat is something installed at a level Apple's own system cannot see, iVerify is the second tool. Running both is the right move for anyone whose situation goes past a single bad relationship. For broader coverage on what paid security tools actually detect, our guide to the best antivirus software in 2026 walks through the threat models desktop scanners handle that iVerify does not.

Lockdown Mode and Stolen Device Protection: when they matter

Two other iPhone features pair with Safety Check: one for active targeted surveillance, one for theft.

Lockdown Mode disables a long list of iPhone conveniences (most message attachment types, complex web content like just-in-time JavaScript, and wired accessory connections while the phone is locked) to shrink the attack surface for mercenary spyware. Apple is explicit that most people never need it: the target audience is journalists, activists, and government employees at credible risk of state-grade surveillance. If that describes the situation, turn it on at Settings > Privacy & Security > Lockdown Mode. If not, Lockdown Mode breaks too many things to be worth running daily.

Stolen Device Protection, added in iOS 17.3 in January 2024, is different. It requires Face ID or Touch ID (not a passcode) for sensitive actions any time the iPhone is away from familiar locations, and enforces a one-hour delay before the Apple Account password can be changed under those conditions. That hour buys the owner time to remotely lock the device through Find My. It should be on already. If it is not, turn it on at Settings > Face ID & Passcode > Stolen Device Protection.

Safety Check, Stolen Device Protection, and iVerify cover three different threat models: the person who was in your life, the thief who now has your phone, and the actor who installed something you cannot see. Apple built two of them. Trail of Bits built the third. The third normally costs a dollar. Through May, it is free. Set them all up before you need them. For readers layering an extra privacy tool on top, our roundup of the best VPNs in 2026 covers the network-level protections the iPhone's built-in features leave to third parties. Our full technology desk tracks the rest.

Frequently Asked Questions

How do you open Apple Safety Check on iPhone?

Open Settings, tap Privacy & Security, then tap Safety Check. The feature requires iOS 16 or later and two-factor authentication on the Apple Account. It runs only on iPhone, not iPad or Mac. The entire setup takes under two minutes once you confirm the passcode has not been shared with the person being cut off.

What is Emergency Reset in Apple Safety Check?

Emergency Reset is the one-tap path inside Safety Check that revokes every person's access to shared data, resets all app privacy permissions, signs other devices out of the Apple Account, and walks through changing the passcode and Apple Account password. It is designed for situations where a survivor needs a clean cutoff without time to audit each sharing relationship individually.

Can someone tell if I used Safety Check on my iPhone?

The Manage Sharing & Access path can produce notifications that a person whose access was revoked may notice. The Quick Exit button in the top-right corner saves progress and exits to the Home Screen with no visible trace the menu was open. For situations where being noticed could escalate danger, advocacy groups recommend working with a trained advocate before making changes.

What does Apple Safety Check not detect?

Safety Check does not surface Mobile Device Management (MDM) profiles, commercial stalkerware apps like Spyzie or Cocospy, or spyware installed through iCloud credential theft. It only reports sharing relationships and permissions Apple's own system manages. Check Settings > General > VPN & Device Management manually for unfamiliar profiles, and use a dedicated scanner like iVerify for known stalkerware signatures.

Is iVerify free and what does it catch?

iVerify Basic is free on the iOS App Store through May 2026, then reverts to a $0.99 one-time charge. It scans for jailbreak indicators, known commercial spyware signatures, and behavioral anomalies that suggest iOS security has been degraded by an exploit. A forensic scan takes about ten minutes and runs in the background, returning a device-health report when complete.

What is the difference between Apple Safety Check and Lockdown Mode?

Safety Check cuts off people and apps who already have access. Lockdown Mode is a preventive hardening setting that disables many iPhone features (most message attachment types, complex web content, wired accessory connections while locked) to shrink the attack surface for mercenary spyware. Apple recommends Lockdown Mode only for journalists, activists, and people at credible risk of state-level surveillance.