iPhone Security Tip 3: Use Wi-Fi Safely on the iPhone
One of the iPhone's most valuable features is its Wi-Fi support, which lets you connect to high-speed wireless networks for faster Web browsing and better data coverage in spots where cellular coverage is less than stellar. However, employing Wi-Fi networks without taking the proper security precautions can leave your device--and everything on it--open to crafty hackers.
First things first, you want to make sure your own personal Wi-Fi networks is secured using Wi-Fi Protected Access (WPA) or another wireless security protocol. (Refer to the product literature that accompanied your wireless router for more on how to enable Wi-Fi security.) When you connect your iPhone to that network for the first time, you'll be prompted for the network's password--assuming you're using some sort of Wi-Fi security. You should also modify the name of your personal Wi-Fi network to something custom, to help reduce the chance of coming across another network with the same name.
To ensure that you don't unknowingly connect to Wi-Fi networks while on the go, you should enable the iPhone's Ask to Join Networks function. You can turn this feature on by once again tapping the main iPhone Settings tab and then choosing Wi-Fi. On the main Wi-Fi settings screen, turn the Ask to Join Networks function on by simply tapping the on/off button next to the option. After the feature is enabled, you'll never connect to an open Wi-Fi network without first being asked to confirm the connection. (The device will still automatically connect to recognized networks, or networks to which you've connected in the past.)
It's also a good idea to disable Wi-Fi whenever it's not in use. This reduces the chance of accidentally connecting to an unsecured or suspect network and saves iPhone battery life. To turn Wi-Fi off, just hit the iPhone Settings icon, tap Wi-Fi and then click the on/off button on the Wi-Fi screen.
iPhone Security Tip 4: Securely Access Corporate, Web Mail
If you're a corporate iPhone user, the most secure way for you to access your e-mail, at least your business mail, is most likely through a Microsoft Exchange Server -- assuming your organization uses Exchange. Lotus Notes users can also securely receive their corporate mail via iPhone thanks to the recent introduction of Lotus iNotes ultralite. (For more on how to receive Outlook and Notes mail on the iPhone, consult your IT administrator.)
For non-business iPhone users, receiving Web mail, like Gmail, AOL and Yahoo Mail, is a breeze; however, the process is not always secure -- especially if you're not aware of how to ensure that secure sockets layer (SSL) protection is enabled, where available. SSL encrypts mail that's sent and received via iPhone. If you're unable to connect to your Web mail using the iPhone and SSL, consider using another mail account that does support the safeguard--I've setup a number of Gmail accounts using SSL on the iPhone. Or, if you choose to access mail without SSL, be aware that your messages are not secured--think post card vs. sealed letter.
To ensure that you're using SSL when retrieving Web mail, click the main iPhone Settings tab, choose Mail, Contacts and Calendar and then select one of your active mail accounts. While on the mail account screen, click Advanced, scroll down to the Use SSL option and ensure that it's set to On.
iPhone users can also access Web mail via their mail provider's portals, but it pays to be security smart when using this process as well. For instance, iPhone users should ensure that the URL for the mail provider's site begins with HTTPS://WWW instead of just HTTP://WWW, which signifies that the connection is secured using SSL. A tiny lock also appears just to the right of URLs when iPhone users navigate to pages that use SSL for secure connections. In other words, be wary of logging into any Web site to check mail via iPhone that doesn't have HTTPS in its URL and a lock to the right of the Web address in your Safari browser.
Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.