Revoke Shared Wallet Keys Remotely in iOS 16

With the introduction of digital key sharing in iOS 16, users can easily share digital car, home, and office keys through apps like Messages and WhatsApp, raising important questions regarding long-term security. The short answer is yes: digital wallet keys can be revoked remotely at any time by the primary owner. This article covers how remote key revocation works in iOS 16, the step-by-step process to remove shared access, and what occurs on the recipient’s device once access is terminated.

How Remote Key Revocation Works

Apple Wallet uses secure element architecture combined with iCloud synchronization to manage digital credentials. When an owner shares a key, the recipient receives a cryptographically signed credential tied to their specific Apple device.

Because the owner remains the administrative authority of the key, Apple Wallet retains the ability to push an invalidation signal to Apple’s servers. Once the owner revokes access, the system marks the recipient's pass as inactive, immediately disabling its ability to unlock the compatible vehicle, smart lock, or access point.

Steps to Revoke a Shared Key in iOS 16

The primary owner can remove a shared key at any time directly through the Apple Wallet app without needing physical access to the recipient's iPhone or Apple Watch:

  1. Open the Wallet app on the primary iPhone.
  2. Select the specific key you previously shared (such as a car or home key).
  3. Tap the More button (the three dots in the upper-right corner).
  4. Tap People to view the list of active users who have received a key.
  5. Tap the name of the user whose access you want to eliminate.
  6. Tap Stop Sharing or Revoke Access, then confirm the choice.

What Happens on the Recipient’s Device

Once revocation is confirmed, the following changes take place:

  • Immediate Invalidation: The recipient's token is deactivated. Even if the recipient holds their iPhone or Apple Watch near the NFC reader, the lock will reject the credential.
  • Wallet Notification: The key in the recipient's Apple Wallet will either update to show as "Revoked" or "Expired," or disappear entirely depending on the manufacturer's integration.
  • Offline Scenarios: For systems that rely on direct local authentication (such as certain offline smart door locks), the revocation command synchronizes the next time the lock updates its internal access list or connects via a bridge, though most modern systems connected via Apple HomeKit or manufacturer clouds update instantaneously.

Access Levels and Automatic Expiration

In addition to manual revocation, iOS 16 allows owners to set access restrictions during the initial sharing process. Certain keys, particularly vehicle keys, permit the owner to set restrictions such as restricted driving modes, guest profiles, or time-limited access. If a time limit is configured, the key revokes itself automatically once the predetermined duration ends, eliminating the need for manual removal.