Stolen Device Protection: How It Works

Stolen Device Protection is a security feature that locks your iPhone behind Face ID or Touch ID when the phone is away from familiar locations, blocking thieves from changing your Apple ID password, passcode, or other critical settings even if they know your passcode. You turn it on in Settings under Face ID & Passcode, and it adds a one-hour security delay before sensitive actions like changing your Apple ID password can be completed. This article explains what the feature does, how to enable it, what it protects against, its limitations, and how it compares to other anti-theft measures.

Why Stolen Device Protection Was Created

Stolen Device Protection was introduced in iOS 17.3 in response to a growing pattern of theft where criminals watch a victim enter their passcode in public, then steal the phone and use that passcode to take over the entire Apple account. Before this feature, knowing the six-digit passcode was enough to change the Apple ID password, disable Find My iPhone, turn off Face ID, and access saved passwords in iCloud Keychain. The thief could lock the owner out permanently and sell the device or use it for identity theft.

The feature is designed specifically for situations where the phone is away from places the owner frequents, like home or work. If the phone is in a familiar location, the extra protections do not apply, because Apple assumes the risk of a thief knowing your passcode is much lower there.

How Stolen Device Protection Works

When enabled, the feature relies on two conditions: the phone must be away from a familiar location, and the user must authenticate with Face ID or Touch ID. Under those conditions, certain actions require biometric authentication only (no passcode fallback), and others require a one-hour security delay followed by a second biometric scan.

Actions that require the security delay include:

• Changing your Apple ID password
• Changing your iPhone passcode
• Adding or removing Face ID or Touch ID
• Turning off Find My iPhone
• Transferring your Apple ID to a new device
• Using a saved password or passkey in Settings

Actions that require only Face ID or Touch ID (no delay) include:

• Using saved passwords in Safari or other apps
• Using Apple Pay with your iPhone
• Turning off Lost Mode
• Erasing all content and settings

How to Turn It On

Stolen Device Protection is available on iPhone models that support Face ID or Touch ID and run iOS 17.3 or later. To enable it:

1. Open the Settings app.
2. Tap Face ID & Passcode (or Touch ID & Passcode on older models).
3. Enter your passcode.
4. Tap Stolen Device Protection.
5. Tap Turn On Protection.

You can also choose to require the security delay only when the phone is away from familiar locations, or always. The default is “Away from familiar locations,” which is the recommended setting because it minimizes inconvenience when you are at home or work.

What It Protects and What It Doesn’t

Stolen Device Protection is specifically designed to stop a thief who knows your passcode from taking over your Apple account and locking you out. It does not prevent physical theft, nor does it stop a thief from using your phone to make contactless payments if Apple Pay is already set up and unlocked. It also does not protect against a thief who steals your phone while it is already unlocked and uses it immediately before the screen locks.

The feature does not protect your other accounts, such as email, bank, or social media, unless they are protected by your Apple ID password or saved passwords. A thief who knows your passcode can still open apps that are not protected by Face ID or a separate password. For that reason, it is wise to use strong, unique passwords for your most sensitive apps and enable two-factor authentication on those accounts as well.

Common Problems and Misconceptions

One common misconception is that Stolen Device Protection will lock you out of your own phone if you forget your passcode. That is not true. If you forget your passcode, you can use your Apple ID password to reset it, but only after the one-hour security delay if the phone is away from a familiar location. The delay is a safety measure, not a permanent lock.

Another issue users report is that the security delay feels inconvenient when they are traveling. If you are on vacation and need to change your Apple ID password, you will have to wait an hour. This is intentional, but you can temporarily disable the feature in Settings if you are in a trusted location and need to make changes immediately. Just remember to turn it back on afterward.

Some users wonder whether the feature works if the phone is in a familiar location but the thief is not the owner. Apple uses location data to determine familiarity, and it is based on the phone’s history, not the person using it. If the thief steals your phone at your home, the feature will not activate because the phone is in a familiar location. That is a known limitation, and Apple recommends using a strong passcode and enabling Find My iPhone as additional layers of protection.

Comparison with Other Anti-Theft Features

Stolen Device Protection is not the only tool available. Find My iPhone lets you locate, lock, or erase a lost device remotely. Activation Lock prevents a stolen phone from being reactivated without your Apple ID password. Two-factor authentication adds a second step to sign in to your Apple ID on a new device. Stolen Device Protection complements these by adding a delay specifically when a thief has both your phone and your passcode.

On Android, a similar feature called “Theft Protection” was introduced in Android 15. It uses AI to detect when a phone is snatched and locks the screen automatically. It also allows remote locking with your phone number. These features are not identical, but they share the goal of making a stolen phone useless to a thief.

Cost and Availability

Stolen Device Protection is free and included in iOS 17.3 and later. It does not require a subscription or an Apple One plan. It is available on all iPhone models that support iOS 17.3, which includes the iPhone XS and later, and the iPhone SE (2nd generation) and later. There is no separate app to download; it is built into the operating system.

Frequently Asked Questions

Will Stolen Device Protection stop a thief from using my Apple Pay?

No, not directly. If the thief has your unlocked phone or knows your passcode, they can use Apple Pay in stores. Stolen Device Protection only adds a delay for changing your Apple ID password and other security settings. To reduce Apple Pay risk, set up Face ID or Touch ID for Apple Pay and use a strong passcode that is hard to observe.

Can I turn off Stolen Device Protection if I’m away from home and need to change my Apple ID password?

Yes, you can turn it off in Settings, but doing so requires Face ID or Touch ID and a one-hour security delay if you are away from a familiar location. So you can turn it off, but you will have to wait an hour before the change takes effect. This is by design to prevent a thief from disabling the protection.

Does Stolen Device Protection work if my phone is offline?

Yes, the feature works without an internet connection. The security delay and biometric requirements are enforced locally on the device. However, if you need to use Find My iPhone to locate or erase the phone, that requires an internet connection or a cellular signal.

What happens if I forget my passcode while Stolen Device Protection is on?

You can still reset your passcode using your Apple ID password, but you may have to wait the one-hour security delay if the phone is away from a familiar location. If you cannot remember your Apple ID password either, you will need to use account recovery through Apple’s website, which can take several days.

Is Stolen Device Protection available on iPad?

Yes, iPadOS 17.3 and later include Stolen Device Protection for iPads that support Face ID or Touch ID. The settings are the same as on iPhone, under Face ID & Passcode or Touch ID & Passcode.

Related

• x402 ACP vs Escrow: When to Use Each
• Redmi K30 Pro Zoom vs Note 9 vs 10X: 4G Guide
• Zombie Rush Best Classes & Costs