Why Apple iPhones Don't Need Antivirus Software

Staff Writer
Updated

You've been conditioned to believe every device needs antivirus software, but that isn't true for Apple's iPhones and iPads. While many security companies offer products that support the iPhone, they're not really antivirus software; Apple has made sure that you don't need it.

Credit: Tom's GuideCredit: Tom's Guide

Why? Apple says it "designed the iOS platform with security at its core." That's more than just a simple platitude, While iPhones and iPads aren't completely fool-proof devices — especially after they've been jailbroken — the iOS platform sandboxes apps inside of a user partition that limits access to the system.

Keep iOS Updated

While you may read stories about iPhone security and privacy, such as a backdoor flaw in its Wi-Fi chip and how an iCloud account can hold a device hostage, third-party solutions can't touch those issues. Apple guards the iPhone's security measures so closely that the most you can do is install iOS updates, which normally include security fixes.

Of course, don't feel the need to do so immediately, as some updates are less stable than others. Unless you're a high-profile individual and you suspect the target of online attacks, you can probably wait a week or two after the most recent update comes out.

iOS Doesn't Let Antivirus Work

In order to understand why you don't need antivirus software for your iOS device, it's important to understand how those programs function on devices that run other operating systems. Rich Mogull, analyst & CEO of the Securosis security firm, tells us that in order for antivirus software to work, it needs hooks into the operating system that — when available — "also create potential vulnerabilities."

MORE: Best Antivirus Software and Apps

Mogull explained that these hooks provide "very deep access to monitor what's going on and detect malware," and can lead to situations where the antivirus software "becomes the target of the attack." iOS doesn't allow for the possibility to latch such hooks into its system, thanks to a design that deeply separates the apps from the rest of the system, a process commonly known as sandboxing.

Credit: Denys Prykhodov / Shutterstock.comCredit: Denys Prykhodov / Shutterstock.com

That strong fence between apps and operating system has currently proven a successful design choice, as Mogull told us that "history shows this is far better" and that "it stops malicious software before it can ever get a foothold." (Android also sandboxes apps, but gives apps far more leeway in affecting other apps and the operating system than Apple does with iOS.)

This way, no apps you download or websites you visit have a chance at cracking the digital safe that contains fingerprint information used by iPhone Touch ID sensors, or steal photos off your device. Sure, you could accidentally click on permissions that let an app access those photos, but no app can access data without asking.

So, for the time being, iOS is proving that its architecture is strong enough to not need antivirus software, which may have been the reason why Apple removed a number of antivirus apps from the App Store in March 2015. Sure, Mac, PC and Android platforms practically require antivirus software, but that's because those operating systems bear more open designs.

And what of the iOS Security Apps?

The various iOS security apps made by antivirus vendors vary in their functionality. Some, such as Avira Mobile Security, let you remotely wipe your phone if it is lost or falls into the wrong hands. But the same functions are found on Apple's Find My iPhone app, which requires iOS 8.

Bitdefender Mobile Security provides the same remote location, lock and wipe tricks you get with Find My iPhone, it does offer one unique trick. After you register your email accounts with the app, it will alert you if your accounts ever get breached so that you can change your passwords immediately.

McAfee's Private Photo Vault, Backup, Mobile Security app offers users a way to lock photos behind a six-digit PIN, but many iOS users already use a password to lock their devices. You can get an app like this if you want a second level of security, but we're not sure why you'd need it, aside from hiding things from anyone that knows your unlock code.

Apps such as Webroot SecureWeb Browser offer protection against malicious websites, promising to save you from phishing attacks. While that sounds like a great feature, Safari on iOS offers a Fraudulent Website Warning feature that is enabled by default. Most website screeners work off publicly available lists of known malicious URLs, so it's unlikely that McAfee's would be much better than Apple's. Also, phishing attacks are so prevalent that by now you shouldn't need an app to remind you not to click on questionable links or type your username and password into suspicious-looking websites.