The Security Flaw
If you use Apple’s HomeKit ecosystem to manage smart lightbulbs, thermostats, or security cameras, iOS automatically places a “Home Control” widget directly on your iPhone’s lock screen. While this allows you to quickly turn off a light without unlocking your phone, it represents a massive physical security flaw. Anyone who finds your phone lying on a table—whether it is a prankster friend or an actual intruder—can instantly manipulate your home’s lighting, temperature, or smart locks without needing your Face ID or passcode. To secure your physical home, you must lock down your digital lock screen.
How to Turn Off Home Control on the Lock Screen
You can permanently sever the connection between your smart home devices and the locked interface via the Face ID settings.
- Open the Settings app on your iPhone.
- Scroll down and tap on Face ID & Passcode (or Touch ID & Passcode).
- Enter your device’s passcode to gain access to the secure menu.
- Scroll down to the section labeled “Allow Access When Locked.”
- Locate the toggle switch labeled Home Control.
- Toggle this switch to the Off position (the green background will disappear).
A Locked Interface
The change takes effect instantly. The iPhone will completely terminate the background API that pushes HomeKit data to the lock screen. The home control icons will instantly vanish from the display. If someone taps on your phone while it is locked, they will see nothing but the time and your wallpaper. To adjust your thermostat or turn off your lights, you must now explicitly unlock the phone using your face or passcode and open the dedicated Home app.