Sim Pin - Privacy & Security question!

p-marg

This might not apply to everyone, but for those using a GrapheneOS device with a SIM card, how important is a SIM PIN for privacy and security?

alfred

p-marg It keeps someone from putting the SIM card into another phone and sending/receiving text messages and phone calls. As far as I know, that is all it is for.

Oggyo

For me personally, SIM PIN causes more problems than it solves. Actually, I'm not sure what the benefits of enforcing the SIM PIN are. Let's start from there.

p-marg

Oggyo Yes, that sounds more like what i was trying to question.

alfred

I would be curious to hear what problems it causes. The pin is on the SIM card, so the phone doesn't enforce anything. If you enter in the wrong pin more than 3 times, you have to reset it with the PUK code.

de0u

alfred I would be curious to hear what problems it causes.

If it's an eSIM, and the PIN and PUK are forgotten, there can be real trouble.

Oggyo

alfred
Maybe I'm mistaken but I don't remember I ever had or may completely lost my PUK code.
I think what @de0u meant was for example discussed here:

AlphaElwedritsch

I deactivated it years ago

DeletedUser88

de0u Only if the eSIM management toggle is disabled from my understanding.

trashaccount

DeletedUser88 Yes. It even survives device formats and OS reflashes. Which is very useful when resetting your device but you want to keep your eSIM.

trashaccount

If you have an eSIM + eSIM Management enabled, then PIN is useless because device resets wipe them anyway. This also gives you the ability to receive calls in BFU. Best of all worlds. In any other case, its probably a good idea to set a SIM pin to protect from weaker attacks by thieves etc.

eSIM also benefits from on-device protections unlike physical SIM.

DeletedUser76

I once setup PIN for physical SIM, and ran into multiple problems. I eventually had to contact my mobile carrier to get the PUK. It was an awful experience. Honestly there's no point of setting up a PIN for SIM.

Xtreix

You've convinced me to disable the lock SIM, I use an eSIM.

Michiel

A physical sim card without a PIN can be risky if your phone gets stolen and if your phone number is used for 2FA, because the card can be put in another phone. Also some else can impersonate you by using your phone number. So, depending on your threat model, a PIN can be important.

DeletedUser64

when I used a physical Sim, a pin was essential, removal from the phone and unauthorized use was simple.
I now use two eSims and removal and unauthorized use is virtually impossible,
eSim pin not required. phone password more than sufficient.