Stolen Device Protection on iPhone: What It Does

Stolen Device Protection is an iPhone setting that adds extra checks when your phone is away from familiar places like home or work. For sensitive actions it requires Face ID or Touch ID with no passcode fallback, and for the most serious changes it adds a one-hour security delay. It is built for the case where a thief has your iPhone and also knows your passcode. To turn it on, go to Settings > Face ID & Passcode > Stolen Device Protection.

Below are the exact steps to turn it on and off, the list of actions Apple says it covers, and the gaps it leaves. Every detail links to the Apple Support page it comes from.

What Stolen Device Protection does

Apple describes the feature as extra security for when your iPhone is away from familiar locations. It is meant to stop someone who has stolen your phone and knows your passcode from making critical changes to your Apple Account or your device.

It works in two layers.

1. Face ID or Touch ID with no passcode fallback. For certain actions away from a familiar location, a passcode alone is not accepted.
2. A security delay. For the most sensitive changes, you authenticate with Face ID or Touch ID, wait one hour, and authenticate again. Apple says the delay may end early if your iPhone detects that you have reached a familiar location.

Apple does not specify how a familiar location is chosen on its support page beyond examples such as home or work. It does list Significant Locations under Location Services as a requirement. At a familiar location you can use your passcode as usual, and the extra steps do not apply, unless you choose to always require them (covered below).

What you need before you turn it on

Per Apple’s requirements:

• iOS 17.3 or later
• Two-factor authentication on your Apple Account
• A device passcode, plus Face ID or Touch ID set up
• Significant Locations turned on under Location Services
• Find My turned on

The feature has to be on before your phone is lost or stolen. Turning it on afterward does not help.

How to turn Stolen Device Protection on or off

1. Open Settings.
2. Tap Face ID & Passcode.
3. Enter your device passcode.
4. Tap Stolen Device Protection, then switch it on or off.

Apple notes it may already be on by default on your iPhone, so check before assuming it is off.

To require the security delay everywhere, including at home, go to the same screen and choose Always under Require Security Delay. This is useful if you do not want to depend on the phone’s idea of a familiar location.

Turning the feature off is itself a protected action. Away from a familiar location, Apple lists turning off Stolen Device Protection among the changes that need Face ID or Touch ID, the one-hour delay, and a second Face ID or Touch ID check. At home you can turn it off without waiting.

Apple recommends turning the feature off before you sell, give away or trade in the phone. It also says Find My cannot be switched off while Stolen Device Protection is enabled, which is why the guide to turning off Find My iPhone tells you to disable Stolen Device Protection first.

Which actions Apple says it covers

These lists come directly from Apple’s support page. They apply away from familiar locations.

Face ID or Touch ID required, no passcode fallback

• Using passwords or passkeys saved in Keychain
• Using payment methods saved in Safari AutoFill
• Turning off Lost Mode
• Opening a locked app
• Erasing all content and settings
• Applying for a new Apple Card
• Viewing your Apple Card or Apple Cash virtual card number
• Certain Apple Cash and Savings actions in Wallet
• Using your iPhone to set up a new device, such as with Quick Start
• Setting up or transferring an eSIM

Apple adds that you can still use your passcode for Apple Pay purchases.

Face ID or Touch ID, one-hour delay, then Face ID or Touch ID again

• Changing your Apple Account password
• Signing out of your Apple Account
• Changing Apple Account security settings, such as trusted devices, Recovery Key or Recovery Contact
• Adding or removing Face ID or Touch ID
• Changing your passcode
• Reset All Settings
• Enrolling in Mobile Device Management
• Turning off Stolen Device Protection

The locked-app item connects to a separate feature. Apple’s page on locked apps says that with Stolen Device Protection on and your iPhone away from familiar locations, a locked app opens only with Face ID or Touch ID. The guide to locking apps on iPhone covers the steps for the lock itself.

What it does not protect

Stolen Device Protection is narrow by design. These gaps follow from Apple’s own descriptions.

It only acts on the actions Apple lists. Anything outside those two lists is governed by the normal rules, where the passcode works. Apple’s lists do not include opening Photos, scrolling your library, reading Messages or opening apps you have not locked. Someone who knows your passcode and has your unlocked phone can use those the usual way.

It is weaker at familiar locations. At home or work, the passcode works as it normally does. If a stolen phone is taken back to a place the iPhone treats as familiar, the extra checks are not applied. Choosing Always under Require Security Delay closes that gap for the delayed actions.

It must be on beforehand. Apple states that it needs to be turned on before the device is lost or stolen.

It does not stop someone who is next to you. The feature is aimed at a thief who has your phone and your passcode. It does not address a partner, relative or coworker who knows your passcode and uses your phone at home, because a familiar location relaxes the checks.

Some changes cannot be made elsewhere. Apple notes that certain security settings cannot be changed on the web at account.apple.com while the feature is on, and that a new device may require a waiting period before you can update these settings.

Why a passcode alone is a weak point

Apple’s reason for building this feature is that a passcode can end up in the wrong hands. Apple’s own wording is about a thief who has stolen your iPhone and knows your passcode, which is the situation the feature exists to limit. How a thief learns the code is not spelled out on the support page. Watching you type it in a public place is one plausible route, and a passcode that is short, guessable or used for years raises the odds.

The practical point is that a passcode is both the key to the phone and the fallback for many things on it. Stolen Device Protection removes the fallback for the actions Apple lists. It leaves the rest of the phone, including your photos and files, reachable with that same code.

Adding a second secret for private files

If your concern is private photos and videos, Stolen Device Protection is one layer and a separate lock is another. A vault app with its own pattern, passcode or password means a thief needs two secrets, the phone’s passcode and the vault’s, to reach what is inside. The built-in options all lean on the device passcode, as the guide to locking photos on iPhone explains.

Forevault is our app for this. It encrypts files on the device with AES-256-GCM and opens with a pattern on a 5×5 grid or a passcode or password, with Face ID as an option. You can keep separate vaults for different patterns, and the lock screen does not list them. You get a 12-word recovery phrase, an encrypted backup to your own iCloud with a “Test a restore” check, and free export to Photos or Files at any time. There is no account and no data collected. The free tier holds 100 photos, 10 videos and 3 vaults. It protects against someone holding your phone, not forensic analysis. Questions go to the support page. Download Forevault on the App Store.

Frequently asked questions

How do I turn on Stolen Device Protection?

Go to Settings > Face ID & Passcode, enter your passcode, tap Stolen Device Protection and switch it on. You need iOS 17.3 or later, two-factor authentication, Find My and Significant Locations turned on. Apple notes it may already be on by default.

How do I turn off Stolen Device Protection?

Use the same path, Settings > Face ID & Passcode > Stolen Device Protection, and switch it off. Away from a familiar location, Apple says this requires Face ID or Touch ID, a one-hour security delay, and another Face ID or Touch ID check. At home there is no wait.

Why can’t I turn off Find My iPhone?

Apple says Find My cannot be turned off while Stolen Device Protection is enabled. Turn Stolen Device Protection off first, then turn off Find My. The Find My guide has the full order.

Does Stolen Device Protection lock my apps?

No, it does not lock apps by itself. When you have locked an app, Apple says Stolen Device Protection removes the passcode option for opening it away from familiar locations, so only Face ID or Touch ID works. You set up app locking separately, as the lock apps guide shows.

Is Stolen Device Protection on by default?

Apple says it may already be on. Open Settings > Face ID & Passcode and look at the Stolen Device Protection switch to see your current state.

Do I need Face ID to use it?

Apple lists a device passcode plus Face ID or Touch ID as requirements. The actions it protects depend on biometrics, since the passcode is not accepted for them away from familiar locations.