How to stop iOS apps from stealing your Apple ID password?
Almost all iPhone or iPad users have observed popups requiring to enter Apple ID and password, this looks like a pretty common thing. It usually happens while you are using Apple’s stores. However, sometimes they can appear unexpectedly.
Consider it a warning: Do not enter your Apple ID when these popups show up in third-party apps. Apparently, they may be used to steal your Apple ID password.
According to a developer Felix Krause, an app only needs about 30 lines of code to make you fool “Enter your Apple ID password” popup that can be used to steal user data. He also said that developers could run certain code only after an app is approved by Apple, and thus App Store also evaluates the app.
The developer explains that even if you use two-factor authentication, your user and password combination, once stolen, can be used to hack into other online accounts. Those people who use this method are at risk of having hackers break into other services and apps.
One way to get rid of this problem is to try to close the app by pressing the home button that was open when the popup appeared. If the dialog disappears from the screen, it’s likely it came from the app and might be a phishing attack. If it stays on the screen, then it’s from Apple.
Apple should find a way to prevent developers from displaying popups that copy system alerts. If you’re worried about an app that displays such popups, you should simply uninstall it and find a different one that serves the same purpose. Potentially fraudulent apps must be reported to Apple. Only enter your password on the iPhone or iPad in Apple’s own apps, whenever they require you to do so.