The Security Vulnerability
If you use Apple’s HomeKit ecosystem to manage your smart home devices (like smart locks, garage doors, or security cameras), iOS integrates those controls directly into your device. By default, the iPhone features a setting called “Home Control” that allows anyone to access these smart home toggles directly from the Control Center, even when the iPhone is completely locked and secured with Face ID. This means if you leave your phone unattended on a table, a stranger could theoretically wake the screen, swipe down, and unlock your physical front door without ever knowing your passcode. You must disable this lock screen bypass.
How to Turn Off Home Control on the Lock Screen
You can permanently revoke access to your smart home devices while the phone is locked via the Face ID settings.
- Open the Settings app on your iPhone.
- Scroll down and tap on Face ID & Passcode (or Touch ID & Passcode on older models).
- Enter your device’s PIN code to access the secure menu.
- Scroll down to the section labeled “Allow Access When Locked.”
- Locate the toggle switch labeled Home Control.
- Toggle this switch to the Off position (the green background will disappear).
Secured Access
The change takes effect instantly. The iPhone will completely sever the connection between the locked Control Center and your HomeKit database. If someone attempts to swipe down on your lock screen, the smart home toggles will either be completely hidden or greyed out and unresponsive. To unlock a door or view a camera, you must now explicitly unlock the iPhone with your face or passcode first, guaranteeing your physical home remains secure.