background: in february, my @tmobile SIM was swapped for the first time. i recovered my number the same day, and added SIM protection with a pin code to prevent future occurrences. i mention this only so that you know that a PIN code doesn't protect you from SIM swapping.

Sherlocked 1Password…. Did it though?

Any thoughts on whether this vulnerability applies to eSIM?

I’m confused. Even if they were able to get a 2FA code how did they reset your password? I thought that requires more than just resetting via SMS.

So how do you protect yourself from this?

Saved 🙏

not without already knowing your password *and* having access to that new device. you need both to add a new device to your icloud account t.

My first confusion is: how does one get their SIM card swapped? Mine is physically in my phone? Shouldn’t they need to steal your phone for this? I feel so old and clueless hehe.

That’s odd. Having recently tried to reset it for both MIL and mom, the phone number alone was never sufficient. At least not without a 15 day delay accompanied by having a code sent to their emails. And that was having their devices in hand

Sherlocked? There’s so much more in password managers that I don’t see people already using password managers switching to that. Especially since we, or at least Apple users, have already access to this… just in a less visible and polished way. The only new feature is the availability on Windows. Now if they add those missing features and make it part of, let’s say, Apple One, then yes there’s a Sherlock potential.