A 6-digit passcode gives you roughly one million combinations. Sounds like a lot, but until you learn that specialized law enforcement tools can work through those systematically, and that’s before accounting for legal compulsion to hand over your code. If you’ve been meaning to strengthen your iPhone’s passcode and keep putting it off, now’s the time.
The good news: iOS makes it easy to set an 8-digit, 10-digit, or even full alphanumeric passcode. It takes about two minutes, and you only have to do it once.
Why Your Current Passcode Probably Isn’t Enough
iOS has defaulted to 6-digit passcodes since iOS 9, which is a real improvement over the old 4-digit standard. But 6 digits still only gets you to around 10 million combinations, and purpose-built cracking hardware can chew through that faster than you’d expect, especially on older devices.
Jump to an 8-digit passcode and you’re at 100 million combinations. A 10-digit code pushes into the billions. A custom alphanumeric passcode mixing letters, numbers, and symbols is dramatically harder to brute-force than a short PIN, and materially stronger against current cracking tools.
Beyond passcode length, iOS 26 gives you a few other layers worth enabling while you’re in here. We’ll cover those too.
Before You Start: One Thing to Check
If you have Stolen Device Protection enabled (and you should, it’s in Settings > Privacy & Security > Stolen Device Protection), changing your passcode while away from a familiar location will trigger a one-hour security delay. Do this at home or somewhere your iPhone recognizes as a trusted location to avoid the wait.
How to Set a Longer Passcode on iPhone (iOS 26)
- Open Settings and tap Face ID & Passcode (or Touch ID & Passcode on older models like iPhone SE). Enter your current passcode when prompted.
- Tap Change Passcode. Enter your current passcode again to confirm.
- On the new passcode entry screen, tap Passcode Options at the top of the keypad.
- Choose your passcode format from the menu that appears:
- Custom Alphanumeric Code: letters, numbers, and symbols; the strongest option by a wide margin
- Custom Numeric Code: as many digits as you want; aim for at least 8, ideally 10
- 8-Digit Numeric Code: a solid middle ground if you want something quick to type
- 6-Digit Numeric Code: the current default; fine, but you can do better
- Enter your new passcode, then enter it again to confirm. That’s it. Your new passcode is active immediately.
Lock your phone and unlock it once to confirm the new passcode works before you forget what you set.
Two More Settings Worth Enabling
While you’re in Face ID & Passcode, scroll down and check these:
Erase Data
Toggle Erase Data on. This wipes your iPhone after 10 consecutive failed passcode attempts. It’s a meaningful deterrent against brute-force attacks on a physical device.
Require Passcode
Make sure Require Passcode is set to Immediately. Any longer grace period means your phone is unlocked and accessible if someone grabs it right after you’ve used it.
Other Protections Worth Knowing About
A longer passcode is one layer. Here’s what else iOS 26 gives you:
- Stolen Device Protection (iOS 17+, enhanced in iOS 26) requires biometric authentication for sensitive actions and adds a one-hour delay when you’re away from familiar locations. Turn this on in Settings > Privacy & Security > Stolen Device Protection.
- USB Restricted Mode blocks data access over USB/Lightning after one hour without an unlock. This specifically defeats hardware tools that connect to your port to extract data. It’s on by default; don’t turn it off.
- Find My + Activation Lock: even if someone bypasses your passcode, Activation Lock ties the device to your Apple ID. A wiped phone is still a brick to them.
Troubleshooting
Can’t type the passcode / keyboard unresponsive
Force restart: press Volume Up, then Volume Down, then hold the Side button until the Apple logo appears. Try again after restart.
“Turn Passcode Off” is greyed out
This usually means Face ID needs attention first. Go to Settings > Face ID & Passcode > Reset Face ID, then try again. If it’s still greyed out, go to Settings > General > Transfer or Reset iPhone > Reset > Reset All Settings. This won’t delete your data but resets system preferences.
Stolen Device Protection is blocking the change
Temporarily disable it in Settings > Privacy & Security > Stolen Device Protection, make your passcode change, then re-enable it. Do this at a trusted location to skip the one-hour delay.
Passcode expired (iOS 26 managed devices)
If your iPhone is enrolled in a work or school profile, iOS 26 can enforce passcode expiration. You’ll be prompted to change it. Follow the steps above to set a new one that meets your organization’s requirements.
What Passcode Length Should You Actually Use?
For most people: a 10-digit custom numeric code hits the sweet spot. It’s fast enough to type with Face ID as your daily driver (you’ll rarely need it), and it’s exponentially harder to crack than the default 6-digit code.
If you want maximum security and don’t mind a slightly slower unlock when Face ID fails, go alphanumeric. A 12-character mix of letters, numbers, and a symbol is extremely resistant to brute-force attacks with any current tooling, though no passcode is truly uncrackable forever.
Either way, pair it with Face ID or Touch ID for day-to-day use. You’ll almost never type the passcode manually, but when it matters, you’ll be glad it’s there.