The danger of phone theft is not limited to the device’s price. If an attacker has seen or learned your screen lock, they may try to access your email account, saved passwords, payment apps, and account recovery options. The goal of a preparation plan is therefore not merely to lock the phone, but to create a second barrier for critical actions even when the lock code is known.

Complete the basic protection first

Instead of an easy-to-guess four-digit code, set a PIN of at least six digits that you do not use anywhere else. When unlocking your phone in a crowded place, make sure people around you cannot see the code. Enable fingerprint recognition or a reliable facial recognition method, but remember that biometrics should work alongside a strong screen lock, not replace it.

Limit the display of message content, one-time verification codes, and banking notifications on the lock screen. It is enough to see that a notification has arrived; the sender and content can remain hidden until the phone is unlocked. Enable the SIM PIN as well and change the carrier’s default code. This ensures that verification is required again if the physical SIM is inserted into another phone. Bear in mind that incorrect SIM PIN attempts can lock the line, and store the PUK provided by your carrier in a safe place.

Turn on Stolen Device Protection on iPhone

Enable Stolen Device Protection under Settings > Face ID & Passcode. According to Apple’s current explanation, this feature requires Face ID or Touch ID for certain actions to protect against someone who knows the screen passcode accessing saved passwords or changing critical account settings; no passcode alternative is offered. More sensitive changes may require biometric authentication, a security delay of about one hour, and a second biometric authentication.

You can choose whether the protection works only away from familiar locations or everywhere. If other people may have physical access to your phone at home or work, the “Always” option is more cautious. In return, your own account changes may also be delayed. After setup, use another device to verify that you are connected to the Find My network and can see the device at iCloud.com/find.

Configure Theft Protection and Identity Check on Android

Setting names may vary by manufacturer. In Google’s current layout, go to Settings > Google > All services > Theft protection. On supported devices, review the Theft Detection Lock, Offline Device Lock, Remote Lock, and Identity Check options. When you are outside trusted places, Identity Check can require biometrics for sensitive actions such as accessing saved passwords, changing the screen lock, adding biometrics, performing a factory reset, or turning off Find Hub.

Google notes that some features are available only on certain Android versions and devices. If an option does not appear in the menu, do not assume the protection is enabled; check the Android version, Google Play system update, and the manufacturer’s support page. Also bear in mind that the boundaries of a “trusted place” do not align exactly with a building’s walls. If you do not want reduced protection while your phone is near your home, limit the use of trusted places.

Run a recovery drill

While you still have the phone, record its serial number and IMEI, but do not keep them in a publicly accessible note. Review the recovery phone number and email address for your Apple or Google account. Do not make the same phone your only means of verification: store backup codes offline or add a second trusted verification method to your account.

Test whether you can sign in to the device-finding page from another computer. Without actually erasing the phone, learn where the options for viewing its location, marking it as lost, and locking it remotely are located. Confirm that Find Hub is enabled on Android and Find My on iPhone. Remember that placing a device in Lost Mode and removing it from your account are different actions. Apple specifically warns that removing a device from the Find My list may remove Activation Lock.

Finally, check that automatic backup completed successfully recently. Deciding to erase a device remotely is easier only when another copy of important files exists. Repeat this short audit every six months: strong screen lock, biometrics, hidden notifications, SIM PIN, theft protection, access to device finding, up-to-date recovery information, and a successful backup. These layers do not prevent theft, but they make it considerably harder for a few minutes of physical access to turn into permanent account takeover.

Research sources

  • Apple Support — Stolen Device Protection: https://support.apple.com/en-ie/guide/personal-safety/ips93055ab1a/web
  • Android Help — Protect your personal data against theft: https://support.google.com/android/answer/15146908?hl=en
  • Apple Support — Steps to take when an iPhone or iPad is stolen: https://support.apple.com/en-la/120837<figure class="article-inline-image"><img src="/api/media/019ffc19-a435-72cd-b988-c4176c463976?v=10114" alt="User enabling fingerprint authentication on a smartphone" width="1200" height="675" loading="lazy"></figure><figure class="article-inline-image"><img src="/api/media/019ffc19-a499-77b8-940a-0815a1581f77?v=9006" alt="Person testing lost-device finding preparations from a laptop at home" width="1200" height="675" loading="lazy"></figure>