SentryFi- SentryFi
- eSIM check
- Can an eSIM be hacked?
eSIM security
Can an eSIM be hacked?
The honest answer is less dramatic than the headlines: the chip is rarely the weak point. Your phone number account is.
Rarely the chip itself. Under the GSMA standard the eSIM is a tamper-resistant component and profile keys cannot be extracted from it. The realistic attack, for eSIM and plastic SIM alike, is SIM swapping: a criminal convinces your carrier to move your number to their device, then receives your SMS codes. Protect your carrier account and prefer app-based codes over SMS.
What the eSIM standard requires
- The eUICC (the eSIM chip) must be a tamper-resistant component that can securely host confidential and cryptographic data. Source: GSMA SGP.21
- Profile keys and algorithm parameters must not be extractable from the eUICC. Source: GSMA SGP.21
- Servers that deliver eSIM profiles (SM-DP+) must be certified under GSMA’s SAS-SM scheme, and their link to the eSIM uses Perfect Forward Secrecy. Source: GSMA SGP.21
The real risk: SIM swapping
The FCC describes SIM swapping as a bad actor convincing your wireless carrier to transfer your service to a phone they control; port-out fraud moves your number to a different carrier account. Source: FCC CISA lists SIM swapping as a way to capture the authentication codes sent by SMS. Source: CISA The UK NCSC notes SMS “was not designed as a method for transmitting secure messages”. Source: NCSC
None of these sources says an eSIM is more or less secure than a physical SIM. They agree the account behind your number is the target.
What you can do
- Add a PIN or passcode to your mobile carrier account.
- Use app-based or passkey sign-in instead of SMS codes where your bank or email allows it.
- Traveling: use the travel eSIM for data and keep your home SIM on for SMS codes, with its data roaming off.
- When you land, check the mobile connection: exit country, DNS answers, certificates.
Frequently asked questions
Is an eSIM more secure than a physical SIM?
Both store keys in secure hardware. An eSIM can’t be physically removed and swapped into another phone, but the common attack — SIM swapping through your carrier — works against both. Protect your carrier account either way.
Can an eSIM be hacked on iPhone?
There is no special iPhone weakness in the eSIM standard. The practical risks are phishing, fake WiFi and SIM swapping at your carrier. Keep iOS updated and add a carrier account PIN.
