iPad security: Passcodes and Password Managers
What sort of password security do you have on your iPad? You can protect your iPad with a passcode which needs to be entered before you can access the device and you can also use have a password manager to create random generated passwords and manage your entire list of passwords.
Do You Need to Password Protect Your iPad?
Because there are currently no known remote attacks against iPads, the biggest security risk is physically losing the device. Thus, the first step is to make sure your tablet’s data is safe in case it’s lost or stolen.
Enabling password protection has a serious drawback: You have to enter the password to unlock the iPad, and that task quickly becomes annoying. At some point you'll ask yourself whether password protection is really worth it. Do you really want to increase security at the expense of convenience?
Keep a couple things in mind. First, password protection on the iPad isn't right for everyone. Perform a personal risk assessment—how likely is it that another individual might try to access your data, and what would happen if they did? If the possibility of such an event is low, and the damage to your data would be negligible, you probably don't need to enable password protection on your iPad. On the other hand, if you store sensitive data on your iPad and you live or work in a high-risk environment, you'll definitely want to enable password protection on your iPad.
Settings: General / Passcode Lock
See also: Video: Configure the settings on the iPad: Part 2 http://youtu.be/-B__XTN2PgI
Complex Passcodes: Use passwords rather than four-digit passcodes
The iPad's numeric passcodes are not difficult to crack, in part because the onscreen keypad for entering them always appears in the same area. A better way is to enable text passwords. Choose the Passcode Lock option under General in the iPad Settings, make sure Simple Passcode is Off, select Turn Passcode On, and enter a password twice. You may want to change the time after which a passcode will be required from the default 15 minutes, but as the iPad warns, shorter times are more secure.
Lost your iPad? Use Find My iPhone to locate it
You can download the app, Find my iPhone from the App Store if you have misplaced, lost or had your iDevice stolen. This app will locate your device on a map where you can take take action to retrieve it: Play a sound, Lock it, Send a message to your device or erase it.
If you've misplaced your iPhone or iPad, you can always use a computer to find it. Log into your iCloud account and you have all the same tools and options as if you were using the Find my iPhone app on your iPad.
What is a keychain?
iCloud Keychain is a password syncing and storage service that works on Safari in iOS and OS X Mavericks. It stores your usernames, passwords, Wi-Fi networks, and credit card information so that you can easily fill in forms or logins whenever you need. It also includes the ability to create a strong password which will create unique passwords for your online accounts so that you no longer have to come up with secure or hard-to-guess passwords. These are stored and synced to users on all other iOS and Mac devices.Your information is securely protected using 256-bit AES encryption, preventing unauthorised use of your information. Additionally, this service can also store user's credit card information, although users will need to enter the credit card security code manually. It should be noted that iCloud Keychain works only in Safari on Mac.
Setting up your first device
The process for setting up your first device (whether it be a Mac or an iOS device) differs slightly from the one for setting up subsequent devices, because you must approve every subsequent device to use iCloud Keychain—either by entering a security code that you’ve chosen or by entering your Apple ID password on another device that’s already set up for iCloud Keychain.
On the iPad - Turn on Keychain in Settings
Ensure that your device is running iOS7.03. Check - Settings: General / Software Update.
Open the Settings app, then iCloud, then tap: Keychain.
On a MAC, open System Preferences, then iCloud and turn on Keychain.
Tap iCloud Keychain to toggle it ON. You may have to sign into your iCloud (Apple) account first.
Create a Passcode
Your device must be protected by a passcode. This can be a simple 4 digit code. Enter your code and then you will be prompted to re-enter it.
There are also options to create more complex codes. Tap: Advanced Options to set a complex code.
.... Passcode Advanced Options
Select the type of code you want and then tap: Next.
Enter your security code, then tap Next. You will then re-enter your code.
Heed the warning and write down your security code.
More security - Phone Number
Enter your country and a phone number where SMS messages can be sent to verify your identity.
Tap Next. Sign in again to iCloud.
Approve another device
Once your first device is set up, move on to the next one. Enabling iCloud Keychain works the same way, except that after entering your Apple ID password, you’ll be prompted to choose a method to approve access:
Use iCloud Security Code (iOS) or Use Code (OS X): Enter the security code you selected when you set up your first device. You may also have to enter a verification number sent via SMS to your mobile phone.
Request Approval (iOS) or Approve from Other Device (OS X): Tap or click this button, and a notification will appear on all your other devices that have iCloud Keychain enabled with the same account. On a Mac, open the iCloud pane of System Preferences, click the Details button next to Keychain, enter your password, and click Allow. On an iOS device, enter your Apple ID password when prompted, and tap Allow.
Enter the security code
This is the code that you entered when setting up the first device.
Enter the verification code
This is an SMS message sent from the mobile phone number you set up when configuring the first device.
If all goes well, this device is now configured to use iCloud Keychain.
Use iCloud Keychain in Safari
To use iCloud Keychain in Safari on a Mac, choose Safari > Preferences, click AutoFill, and make sure all desired categories are selected.
On an iOS device, tap Settings > Safari > Passwords & AutoFill, and enable your preferred categories.
1. Names & Passwords: When you turn this on, you will be prompted to set a passcode for your iPad. You can also select: Use without Passcode, however, this leaves your device unprotected and your passwords potentially vulnerable should you lose the iPad. Set a passcode: Settings: General / Passcode Lock.
2. Saved Passwords: See a list of all the passwords and websites stored on the device.
3. Credit cards. You can add credit cards to your keychain. Turn it ON and tap: Saved Credit Cards to add a credit card.
Then, when you visit a site in Safari for which you’ve previously stored a username and password, the fields should be filled in automatically; just click or tap the Login (or similar) button to log in. If you manually enter a username and password that wasn’t stored in your iCloud Keychain, a prompt should appear; click Save Password to store your credentials for that site.
Signing in with a saved password
I have a saved password for Dropbox.com. when I go to that page in Safari and tap the Sign In button, I will be signed in automatically. All my saved passwords are synced to every other device running iCloud Keychain. So my iPhone, the other device I setup laso has my dropbox password in the Saved passwords list. This is all done
Delete a saved password
From Settings: Safari / Saved Passwords.
Tap the Edit button (top right). Select the password you want to delete, then tap: Delete.
Generate a password
To generate a new, random password for a site on which you’re setting up an account, first make sure the Password field is blank and then click or tap in it. Safari will suggest a password; click or tap it to fill it in and save it in iCloud Keychain.
The password suggested is encrypted. You don't need to remember it as when you go to sign into your account, Safari will auto-fill your login credentials and log you in.
Store more than one password per site: iCloud Keychain can store more than one username/password combination per site, too. When you visit a site for which you have multiple credentials, delete the prefilled username and password, and then click in the Username field. Safari will pop up a list of options for you to choose from.
Store credit card numbers
Credit card numbers work almost the same way as passwords. When you enter a number the first time, Safari prompts you to save it. Later, when you see a blank Credit Card Number field in Safari, click or tap in that field to display a list of credit card numbers you’ve stored in iCloud Keychain; then select the one you want. Although Safari fills in your card number and expiration date, you must type in your CVV number yourself.
To view or remove saved passwords on a Mac, choose Safari > Preferences and click Passwords; on an iOS device, tap Settings > Safari > Passwords & AutoFill > Saved Passwords. Both versions of Safari also have a setting that lets you override sites that disable AutoFill—it’s Allow AutoFill Even for Websites that Request Passwords Not Be Saved on a Mac, and Always Allow on an iOS device.