How to prevent your naughty pictures from appearing on the Internet

A reader who wished to remain really, really anonymous has failed in this regard. She writes:

Recently some pictures and movies stored in my iCloud account have found their way onto the Internet and they're, well... embarrassing. Is there some way I could have prevented this from happening?

Yes. If you'd disabled photo sharing from your iPhone to your iCloud account those pictures would have remained on your phone. Although the horse has left the barn, here's what you might have done.

On your iPhone go to Settings > iCloud, tap on Photos, and ensure that the My Photo Stream option is switched off. Your iPhone will no longer automatically send its images to iCloud.

Switch off Photo Sharing while you're at it. Although this latter feature is intended for sharing images with just those friends you choose, when your career can be ruined by an unwisely shared image it's best to leave all your images on the phone. Should you later wish to share an image, do so via email, message, or a social media account where you select specific images to share.

Note that if you have photo sharing enabled on other Apple devices--your iMac and iPad, for example--those images are still in iCloud and could be retrieved by someone who has access to your account. In this case it's not a bad idea to delete embarrassing images one by one in iPhoto and the Photos app.

But hang on, those image may still exist in another form. If you've switched on iCloud Backup on your iPhone, the images it holds are sitting in iCloud in the form of a backup archive. If someone gains access to that backup, they have your images and movies. To prevent your iPhone from creating such a backup, tap Settings > iCloud > Storage & Backup and disable the iCloud Backup option. Now when you want to back up your iPhone you'll need to connect it to your computer and back it up via iTunes.

You're not out of the woods yet. Those backup files still exist on iCloud. To remove them, navigate once again to Settings > iCloud > Storage & Backup, tap Manage Storage, and in the resulting screen you'll see a list of backups. Tap any that you wish to delete and on the next screen tap Delete Backup.

Finally, let's talk about passwords. Despite all the "hacking" that's gone on in the last couple of years people remain careless about the passwords they create. If you use a single word or simple sequence of numbers as a password, it's the work of a moment for ne'er-do-wells to run a script that generates a series of common passwords and break into your account. Once that's done they have access to everything you thought was under lock and key.

So, the first step is to create a very difficult to guess password--one made up of letters, numbers, and characters. (And no, p@ssw0rd isn't going to cut it.)

If this doesn't make you feel secure enough, switch on two-factor authentication for your iCloud account. The gist is that once set up, not only do you have to enter a password to access your iCloud stuff but you have to verify your request on a device you own--your iPhone, for example. Unless someone knows your password and has possession of your phone, you should be safe.

Join the CSO newsletter!

Error: Please check your email address.

Tags security

More about Apple

Show Comments

Featured Whitepapers

Editor's Recommendations

Solution Centres

Stories by Christopher Breen

Latest Videos

  • 150x50

    CSO Webinar: Will your data protection strategy be enough when disaster strikes?

    Speakers: - Paul O’Connor, Engagement leader - Performance Audit Group, Victorian Auditor-General’s Office (VAGO) - Nigel Phair, Managing Director, Centre for Internet Safety - Joshua Stenhouse, Technical Evangelist, Zerto - Anthony Caruana, CSO MC & Moderator

    Play Video

  • 150x50

    CSO Webinar: The Human Factor - Your people are your biggest security weakness

    ​Speakers: David Lacey, Researcher and former CISO Royal Mail David Turner - Global Risk Management Expert Mark Guntrip - Group Manager, Email Protection, Proofpoint

    Play Video

  • 150x50

    CSO Webinar: Current ransomware defences are failing – but machine learning can drive a more proactive solution

    Speakers • Ty Miller, Director, Threat Intelligence • Mark Gregory, Leader, Network Engineering Research Group, RMIT • Jeff Lanza, Retired FBI Agent (USA) • Andy Solterbeck, VP Asia Pacific, Cylance • David Braue, CSO MC/Moderator What to expect: ​Hear from industry experts on the local and global ransomware threat landscape. Explore a new approach to dealing with ransomware using machine-learning techniques and by thinking about the problem in a fundamentally different way. Apply techniques for gathering insight into ransomware behaviour and find out what elements must go into a truly effective ransomware defence. Get a first-hand look at how ransomware actually works in practice, and how machine-learning techniques can pick up on its activities long before your employees do.

    Play Video

  • 150x50

    CSO Webinar: Get real about metadata to avoid a false sense of security

    Speakers: • Anthony Caruana – CSO MC and moderator • Ian Farquhar, Worldwide Virtual Security Team Lead, Gigamon • John Lindsay, Former CTO, iiNet • Skeeve Stevens, Futurist, Future Sumo • David Vaile - Vice chair of APF, Co-Convenor of the Cyberspace Law And Policy Community, UNSW Law Faculty This webinar covers: - A 101 on metadata - what it is and how to use it - Insight into a typical attack, what happens and what we would find when looking into the metadata - How to collect metadata, use this to detect attacks and get greater insight into how you can use this to protect your organisation - Learn how much raw data and metadata to retain and how long for - Get a reality check on how you're using your metadata and if this is enough to secure your organisation

    Play Video

  • 150x50

    CSO Webinar: How banking trojans work and how you can stop them

    CSO Webinar: How banking trojans work and how you can stop them Featuring: • John Baird, Director of Global Technology Production, Deutsche Bank • Samantha Macleod, GM Cyber Security, ME Bank • Sherrod DeGrippo, Director of Emerging Threats, Proofpoint (USA)

    Play Video

More videos

Blog Posts

Market Place