One feature that often flies under the radar (but deserves your attention) is AirDrop, Apple’s wireless file-sharing tool. While this feature makes it incredibly convenient to send and receive photos, documents, and links between Apple devices, it can also create serious privacy and security risks if left open.
AirDrop works by using Bluetooth to discover nearby devices and Wi-Fi to transfer files. When properly setup, it’s a very useful tool. But when left enabled (especially to “Everyone”) your device becomes discoverable by strangers, leaving it open to unsolicited content, accidental data leaks, and known security vulnerabilities.
What is AirBorne?
One known vulnerability, called AirBorne, shows why it’s smart to rethink your AirDrop settings. Discovered by security researchers, AirBorne targets not only Airdrop but also Bluetooth Low Energy (BLE). What makes this vulnerability especially concerning is that it can be exploited without any user interaction. In some cases, simply being within wireless range of an attacker was enough to compromise a device. Researchers demonstrated that iPhones and iPads could be silently targeted just by having AirDrop services enabled. In more advanced scenarios, attackers could install malware, access sensitive data, or even take remote control of the device. While Apple has patched many of the issues in recent iOS updates, the underlying lesson is clear: wireless features like AirDrop should be disabled when not in use.
How to Disable (or Restrict) AirDrop
On iPhone or iPad:
- Open Control Center (aka swipe down from the top-right corner of the screen)
- Press and hold the network settings tile
- Press the AirDrop tile
- Choose:
- Receiving off: Safest option
- Contacts only: Safer than “Everyone”
- Everyone for 10 Minutes: Temporary and limited, unsafe while in use
On Mac:
- Open Finder
- Click AirDrop in the sidebar
- At the bottom, change the “Allow me to be discovered by” setting to:
- No one: Safest option
- Contacts Only: Safer than “Everyone”
- Everyone: Unsafe option, do not choose
Our Recommendation
We strongly recommend turning off AirDrop by default and only enabling it when you actively need it. When you do enable AirDrop, only enable it with contacts only. It’s also important to keep your iOS and macOS devices up to date, as regular updates include critical security patches for vulnerabilities like AirBorne. For businesses, we advise implementing device management policies that restrict file-sharing features unless the yare explicitly approved, ensuring a more secure and controlled environment.