Apple Watch open to Activation Lock bypass, can be paired with other iPhones

This may be something that’ll need to be fixed in a near-term firmware update.

A new video has shown that the Apple Watch’s wrist-detection, which is designed to ask for your passcode if the wearable is removed from your wrist. The iDownloadBlog video demonstrates how the Apple Watch can be reset without having to enter the passcode, then paired with any other iPhone.

iPhones are protected by Activation Lock, which means that even if a thief performs a hard reset of the phone, it cannot be reactivated without the original owner’s Apple ID and password. The Apple Watch, however, has no such protection, and does not require a passcode to wipe it.

The Apple Watch is theoretically protected by a passcode which has to be entered if the device is removed from your wrist, but an apparent bug allows a hard reset to be performed without it.

A hard reset is carried out by a long-press of the Contacts button until a power-off option is offered. Force Touching this option brings up a dialogue offering to erase all contents and settings, which can be executed simply by placing the watch on the charger, with no passcode required.

Stay tuned for additional details as they become available.

Via 9to5Mac and iDownloadBlog