SentryFi- SentryFi
- eSIM check
- eSIM vs SIM security
eSIM security
eSIM vs SIM security: which is more secure?
Both keep your network keys in secure hardware. They differ in what happens if your phone is stolen, and in how a number moves between devices.
Roughly equal, with one practical edge for eSIM: it can’t be pulled out of a stolen phone and put in another one. Both store keys in tamper-resistant hardware (the GSMA standard says profile keys must not be extractable from an eSIM). The biggest risk for both is the same: SIM swapping, where someone convinces your carrier to move your number. Protect your carrier account and prefer app-based codes over SMS.
Side by side
| Question | Physical SIM | eSIM |
|---|---|---|
| Keys in secure hardware | Yes (SIM card chip) | Yes (eUICC; keys not extractable per GSMA SGP.21) |
| Phone stolen | SIM can be removed and used in another phone (unless SIM PIN is set) | Can’t be removed; moving it needs the phone unlocked or the carrier |
| SIM swap at the carrier | Possible | Possible |
| Profile delivery | Plastic card in a shop or by post | Downloaded from certified servers (GSMA SAS-SM) |
The shared risk: SIM swapping
The FCC describes SIM swapping as convincing your carrier to transfer your service to a phone the attacker controls. CISA lists it as a way to capture codes sent by SMS, and the UK NCSC notes SMS wasn’t designed for secure messages. This works the same whether your line is on a plastic SIM or an eSIM.
What to do
- Add a PIN or passcode to your carrier account; ask about port-out or SIM-change locks.
- Set a SIM PIN if you use a physical SIM.
- Use app-based or passkey sign-in instead of SMS codes where possible.
- Lock your phone with a strong passcode; it also guards eSIM transfers.
Frequently asked questions
Is an eSIM harder to hack than a SIM card?
The chip itself is rarely the weak point for either. eSIM removes the risk of a thief simply moving the card to another phone; SIM swapping at the carrier affects both.
Can someone clone an eSIM?
The GSMA standard requires that profile keys can’t be extracted from the eSIM, which is what cloning would need. Carrier-side SIM swaps are the realistic risk.
Should I switch to eSIM for security?
It’s a reasonable choice, mainly for theft resistance. The bigger win is protecting your carrier account and moving away from SMS codes.
