Is it possible my iPhone has been hacked by husband?

[elviragh]

My husband (we're separated but it's amicable, though he hadn't wanted to separate initially and has been abusive in the past) gave me an iPhone a few months ago. I've noticed a couple of odd things happening and would appreciate any advice. I'm paranoid my phone has been hacked. I could do without the expense of a new phone as we have a planned house move etc.

My history on Safari being deleted was the first that I noticed, as I kept being asked to click accept data/privacy again by Google and YouTube. Then a video appeared in my 'notes' section. I've also had three emails requesting a password reset from Facebook, seem to be genuinely from them, and I've clicked through to say I didn't request them. This morning I discovered I'd been added to a private Facebook group I hadn't requested to join. It was a children's local sports club in another part of the country.

Is there any way I can check? I think I should start with password changes, possibly from my laptop, if that would help?

I know it's inconvenient but I'd reset the phone to factory settings and start again. In settings it should tell you if there are other phones linked to the account. Look out for tracking apps too. What a nightmare!

Yes change your passwords immediately. I’d be more worried a fraudster has managed to get into one of your accounts.

Prioritise -
Apple account
Email account
Banking accounts

Set up 2 factor authorisation for any accounts that offer it, so you have to get a code texted to your mobile to be able to log into websites.

If you tend to save passwords on your iPhone use the Apple password security recommendations to see where there might have been any data leaks or where you’ve used passwords across multiple sites?

Settings > Passwords > Security recommendations

You could always close your Apple account, factory reset the phone and create a new Apple ID. Probably no need to buy another phone. Or contact Apple for advice too.

Was the phone given to you new and unwrapped or had he already set it up?

As others have said, do a hard reset but this time create a new Apple ID and create a password with numbers/dashes/spaces so it can't be guessed. Do the same with your main email and Facebook accounts too.

The Facebook group - have you friends in it? I’m sometimes invited to groups by friends and dependent on group settings it can look like I’m magically added for a while.

is it your Icloud account set up with phone.

is find my phone switched on or off and is it linked to any other devices.

did you have to set phone up as a new user?

Thank you, I really appreciate it! I'll look into this today.

I think the video posted in my notes was connected to my husband, the topic that is. It was a short YouTube link/clip.

Was the phone given to you new and unwrapped or had he already set it up?

No, it wasn't new and unwrapped. I think he must have bought it secondhand as it's not the latest phone. It was all cleared and ready to synch and transfer with my old phone

I don't have friends in the group. It's a local private group for a sport club for children (they should probably have checked I was a parent of a club member, though I left immediately). It has nothing to do with me. I received a notification saying my request to join had been accepted.

iCloud is connected to my account I think. I've literally just switched off find my iPhone and location services.

Yes, I had to set up phone as a new user. It had been reset (possibly by my husband) and immediately required me to set up with my account.

Unfortunately it's quite common - and the fact he's an ex who gave you an expensive phone is a red flag in itself.

You definitely don't need to get rid of the phone, you do need to deal with accounts and apps.

To do this you'll need to generate lots of new passwords - Google or Apple can usually generate random ones for you and store on the keychain, or use lastpass. Then you only need to ensure you remember your Google account or Apple ID (or lastpass Id) and the rest will be unguessable for him. Obviously, make your new Google/apple etc unguessable also, no kids names pets names etc.

Reset my your email and social media passwords asap and all at one time, email first. While doing it, check on your associated accounts (a common trick is for someone to set up all your mail to be forwarded to them, or to set themselves up as an 'associated account' so if you reset your password, they can get it reset again via their address)

Check your photos and contacts are backed up, then factory reset your phone. This will delete all apps including any that might be spyware.

When you reinitialise the phone don't let it reload with existing apps etc.
It's annoying, but just re-download the ones you want. Reset their passwords too.

Think of any password hints you have set up that he'd know.