Are Third-Party Keyboards Safe on iPhone? Full Access Explained

Quick answer: Are third-party keyboards safe on iPhone?

Third-party keyboards can be safe, but the safety depends on one switch: Allow Full Access. With it off, iOS keeps the keyboard in a restricted sandbox with no network access, so it has no way to send your keystrokes anywhere. With it on, the developer can technically send what you type to a server, which means you are trusting the developer, not just Apple. iOS also swaps in Apple's own keyboard for password fields and phone-number fields, and any app can refuse custom keyboards altogether.

The rest of this guide explains exactly what each setting allows, what a keyboard can and cannot see, and how to vet any keyboard in under two minutes.

What is a third-party keyboard on iPhone?

A third-party keyboard is any keyboard you install from the App Store that replaces Apple's default keyboard while you type. Once you add one in Settings > General > Keyboard > Keyboards, it becomes available in every app that accepts text. You switch to it by tapping and holding the globe key.

Because it sits between your fingers and every text field, a keyboard sees more than almost any other app. That is why Apple built a permission system around it.

What does "Allow Full Access" actually do?

Full Access is Apple's name for a keyboard extension's "open access" permission. According to Apple's developer documentation, a keyboard has no network access and cannot share data with its parent app by default. Turning on open access widens that sandbox.

Here is the difference in plain terms:

Apple summarizes the privacy side this way: with open access off, users know their keystrokes go only to the app they are using, and with it on, the keystrokes are available to the keyboard's developer. When you add a keyboard, iOS shows a warning to that effect.

Two important details people often miss:

1. Full Access is not required to add a keyboard. A basic keyboard works without it. You lose optional extras, not core typing.
2. Full Access does not mean a keyboard is spying. It means the ability exists. Whether a developer uses it depends entirely on their practices.

Can a third-party keyboard read my passwords?

Not in password fields. Apple's documentation says that when you tap into a secure text field (the kind that shows dots), iOS temporarily replaces the custom keyboard with the system keyboard, then brings yours back when you move to a normal field. The same swap happens in phone-number-only fields, such as the phone field in Contacts.

Apps can also opt out completely. Apple notes that a banking app, or an app bound by health-privacy rules, can reject all custom keyboards and always use the system keyboard. So in many banking apps you will simply see Apple's keyboard no matter what you installed.

What a custom keyboard can see is everything you type in ordinary fields: messages, emails, search boxes, usernames, notes. That is the real privacy question, and it is why Full Access matters.

Has Apple ever warned about third-party keyboard security?

Yes. In 2019, Apple published an advisory about a bug in iOS 13 and iPadOS 13 that could let keyboard extensions get full access even when the user had not approved it. TidBITS covered it at the time and recommended removing any third-party keyboards you do not actively use. Apple said it would fix the bug in an update.

That episode is a good reminder of two habits: keep iOS updated, and keep your installed keyboards to a minimum.

How do you check if a keyboard is safe before using it?

Use this six-step check. It takes about two minutes.

1. Look at the App Store privacy label. "Data Not Collected" is the strongest signal. "Data Linked to You" on a keyboard deserves a closer read.
2. Ask whether the keyboard needs the internet to do its job. A number pad or symbol keyboard does not. A cloud-powered prediction keyboard does.
3. Test it with Full Access off. If the keyboard still does its main job, the permission is optional, which is a good sign.
4. Read the privacy policy. Look for what is collected, how long it is kept, and whether it is shared.
5. Check the permission yourself. Go to Settings > General > Keyboard > Keyboards, tap the keyboard's name, and see whether Allow Full Access is on.
6. Remove keyboards you no longer use. Fewer installed keyboards means less exposure.

Which kinds of keyboards are lower risk?

The lowest-risk keyboards are single-purpose utilities that never need a network: number pads, symbol keyboards, and similar tools. They have nothing to sync and nothing to predict from the cloud, so they can work with Full Access fully off.

Higher-risk keyboards are the ones with cloud features such as syncing, online suggestions, or account sign-in. Those features need Full Access to function, so the trust you extend is larger. That does not make them bad, but it does mean the developer's privacy practices matter more.

How NumPad Pro handles keyboard privacy

NumPad Pro is a free numeric keyboard for iPhone and iPad (iOS 17 or later) with a full-size number pad, a math operator row, and a symbol column. It is built around the principle above: a number keyboard does not need the internet.

• No data collected. Its App Store privacy disclosure lists data not collected, and it includes no analytics or third-party trackers.
• Works offline. There is no server involved in typing.
• Full Access is optional. It is used only to enable haptic feedback. The keypad works without it.

Honest limits, because they apply to every custom keyboard: NumPad Pro will not appear in password fields or phone-number-only fields, and apps that block custom keyboards will show Apple's keyboard instead. You switch back and forth with the globe key.

Want to try it? The setup steps take under a minute, or read our guide on how to get a dedicated numeric keyboard on iPhone. You can also download NumPad Pro on the App Store.

How to turn Allow Full Access on or off

1. Open Settings and tap General.
2. Tap Keyboard, then Keyboards.
3. Tap the name of the third-party keyboard.
4. Toggle Allow Full Access on or off.

To add or remove a keyboard entirely, follow Apple's guide to adding or changing keyboards on iPhone.

Frequently asked questions

Is it safe to use a third-party keyboard for banking?

Usually you will not be using one. Apple's documentation says banking apps can reject custom keyboards and always use the system keyboard, and password fields always switch to the system keyboard. For everything else, keep Full Access off unless the keyboard needs it.

Can a third-party keyboard see my passwords?

Not in secure password fields, where iOS substitutes the system keyboard. It can see text you type into ordinary fields, such as usernames, emails, and messages, which is why you should only install keyboards from developers you trust.

Does Allow Full Access mean the keyboard is spying on me?

No. It means the keyboard is able to use the network and extra capabilities. Many reputable keyboards request it for features like syncing or predictions. The risk depends on the developer's practices, which you can check through the App Store privacy label and privacy policy.

Should I turn off Allow Full Access?

If the keyboard works well without it, leaving it off is the safest choice, because iOS then prevents the keyboard from sending keystrokes anywhere. If you want a feature that needs it, such as haptics in NumPad Pro, turn it on only for developers you trust.

Do third-party keyboards work without internet?

Yes, if they do not rely on cloud features. A keyboard with Full Access off cannot use the network at all, and a utility keyboard such as a number pad does not need one.

How do I remove a third-party keyboard?

Go to Settings > General > Keyboard > Keyboards, tap Edit, tap the red minus button next to the keyboard, then tap Delete and Done. Deleting the keyboard's app also removes it.

The bottom line

Third-party keyboards are not inherently unsafe, and they are not inherently safe either. The permission that decides it is Allow Full Access. Keep it off when you can, check the App Store privacy label, prefer keyboards that do not need the internet for their job, and remove the ones you do not use.