iPhone viruses are rare, but you can check your device's security status in Settings
iPhones get viruses far less often than Android phones or computers because Apple controls what software can run on the device. The App Store reviews every app before it appears, and iOS prevents apps from accessing parts of your phone they shouldn't touch. That said, you can check your iPhone's security posture directly in Settings without downloading anything extra.
The fastest check is in Settings > General > iPhone Storage. Look at the list of apps and their sizes. If an app you don't recognize is taking up space, or if an app you know has grown to an unusual size, that's worth investigating. Uninstall anything you don't use or don't remember installing.
A second check lives in Settings > Privacy. Scroll through each category — Location Services, Contacts, Photos, Microphone, Camera — and see which apps have permission to use them. If a flashlight app or a game has location access, that's suspicious. Revoke permissions that don't make sense for what the app does.
Key Takeaways
- Check Settings > General > iPhone Storage to see which apps are installed and how much space each uses; uninstall anything unfamiliar or oversized.
- Review Settings > Privacy to see which apps have permission to access your location, contacts, photos, microphone, and camera, and remove permissions that don't match what the app should do.
- Look in Settings > General > VPN & Device Management to see if any profiles or VPN configurations were installed without your knowledge.
- Restart your iPhone by powering it off and back on, which clears temporary files and stops most malicious processes from running.
- If you suspect a real problem, sign out of iCloud in Settings > [Your Name] > Sign Out, then sign back in to refresh your security keys.
Check what apps have permission to your data
Malicious apps often ask for permissions they don't need — location access, contact lists, photos, or microphone — and then use that access to steal information or send it elsewhere. You can see exactly what each app is allowed to do by going to Settings > Privacy.
Tap each section: Location Services, Contacts, Photos, Microphone, Camera, Health, and Reminders. For each one, you'll see a list of apps that have asked for access. If a calculator app has location permission, or a note-taking app can access your contacts, that's a red flag. Tap the app name and change the permission from "Always" or "While Using" to "Never," or remove it entirely.
Pay special attention to apps that have "Always" location access. Most apps should only need location "While Using" the app. If something has "Always" and you don't know why, change it.
Look for unexpected profiles or VPN configurations
Some malware installs itself as a device profile or VPN configuration, which lets it intercept your traffic or control what you see. You can check for these in Settings > General > VPN & Device Management.
If you see a profile or VPN listed that you don't recognize, tap it and select "Remove Profile" or "Delete Configuration." You may be asked for your passcode. If you see something you installed but forgot about — like a work VPN your employer set up — you can leave it, but make sure you trust whoever installed it.
If you can't find this menu, it means no profiles are installed, which is the safest state.
Restart your iPhone to clear temporary threats
A restart clears temporary files from memory and stops most malicious processes from running. Power off your iPhone by holding the side button and either volume button until the power-off slider appears, then drag it to turn off the phone. Wait 10 seconds, then hold the side button again until the Apple logo appears.
After the restart, go back to Settings > General > iPhone Storage and see if any suspicious apps have reappeared or if storage usage has changed. If the same app keeps showing up or growing, it's worth deleting.
Check your Apple ID security settings
If malware has compromised your account, it may have added a recovery email or phone number, or changed your password. Go to Settings > [Your Name] > Password & Security and review the email addresses and phone numbers listed under "Account Recovery."
If you see something you didn't add, tap "Edit" and remove it. You can also check your recent sign-in activity by going to Settings > [Your Name] > Password & Security > Recent Sign-Ins with Your Apple ID. If you see a location or device you don't recognize, tap it and select "This Wasn't Me" to sign that session out.
If you suspect your password has been compromised, change it in the same menu by tapping "Change Password."
Delete apps you don't recognize or trust
The most direct way to remove a threat is to delete the app that carries it. Long-press any app on your home screen or in the App Library and select "Remove App," then "Delete App." Confirm by tapping "Delete."
If you're not sure whether an app is safe, search for its name online along with the word "malware" or "scam." Read recent reviews on the App Store — if dozens of people report that an app is stealing data or showing ads they didn't consent to, that's a sign to remove it. You can always reinstall it later if you change your mind.
When to consider a full reset
If you've checked all of the above and still see strange behavior — apps crashing, your phone running hot, battery draining fast, or data usage spiking — a full reset may be necessary. Before you do this, back up your data by going to Settings > [Your Name] > iCloud > iCloud Backup and tapping "Back Up Now."
Then go to Settings > General > Transfer or Reset > Erase All Content and Settings. This wipes your phone completely and reinstalls iOS fresh. When you set it up again, restore from your backup. If the problem was a malicious app, it won't be in your backup because you deleted it.
A full reset is rare and usually unnecessary. Most threats on iPhone can be removed by deleting the offending app and restarting the phone.
Frequently Asked Questions
Can iPhones actually get viruses?
Real viruses that spread from phone to phone are extremely rare on iPhone because iOS prevents apps from running code outside the App Store. Malicious apps exist, but they're contained to what they can access. Android phones are more vulnerable because they allow installation from outside the Play Store.
What does it mean if my iPhone is running slow?
Slowness usually comes from too many apps running at once, a full storage drive, or an old battery — not malware. Check Settings > General > iPhone Storage and delete apps or photos you don't need. If your phone is more than three years old, the battery may be degraded, which makes it slow down to protect itself.
Is it safe to use a free VPN app?
Free VPN apps are often less trustworthy than paid ones because they need to make money somehow, and that sometimes means selling your data. If you need a VPN, use one from a company you recognize — Apple's own iCloud+ includes a VPN called iCloud Private Relay. Read recent reviews before installing any VPN app.
What should I do if I see an app I don't remember installing?
Go to Settings > General > iPhone Storage, find the app, tap it, and select "Offload App" first. This removes it temporarily without deleting your data from it. If your phone works better without it, go back and tap "Delete App" to remove it permanently. If you need it, you can reinstall it from the App Store.
Does Apple scan my phone for viruses automatically?
Apple doesn't run a traditional antivirus scan, but iOS itself prevents most malware from running. The App Store reviews apps before they're published, and iOS sandboxes each app so it can't access files or hardware it shouldn't. Your best protection is keeping iOS updated and only installing apps from the App Store.