Apple ID Passcode Reset Bypass
Detection
Screen Time passcode is reset using child’s own Apple ID credentials if recovery was assigned to child’s account instead of parent’s account.
Fix (technical)
When setting up Screen Time passcode on a child‚s device managed via Family Sharing, ensure the passcode is set remotely from the Parent/Organizer device, or ensure parent‚s Apple Account credentials are supplied for passcode recovery (DE: Bildschirmzeit-Code über das Gerät des Familienorganisators festlegen)13.
Fix (relational)
Teach digital security fundamentals regarding account credentials and password confidentiality.
Residual risk
If child possesses parent’s Apple Account password, recovery can still be initiated.
Sources
-
apple-support-102677-de
-
apple-support-105121-de