How to Protect Your iPhone Before It’s Stolen: 6 Settings to Change Now

Six iPhone settings that stop a thief switching off tracking, reading your codes or taking over your accounts, plus what to do if your phone is stolen.

How to Protect Your iPhone Before It's Stolen: 6 Settings to Change Now

Most phone thieves don’t snatch an iPhone and run. They watch you type your passcode on a train or in a bar, take the phone, and then work fast: swipe down to turn on Airplane Mode so you can’t track it, read the codes that land on the lock screen, and start resetting your accounts before you’ve even noticed it’s gone.

Every one of those moves can be blocked in a few minutes from Settings. Here are the six changes worth making today, and what to do if the worst does happen.

Quick Facts

  • Stolen Device Protection stops a thief using your passcode to change your Apple Account or turn off Find My.
  • Turn off Control Centre on the lock screen so nobody can switch on Airplane Mode without unlocking the phone.
  • Hide notifications when locked so login codes and messages can’t be read off the screen.
  • Find My network keeps an iPhone 11 or later trackable even after it’s been switched off.
  • A SIM PIN stops someone putting your SIM in another phone to receive your text codes.
  • Takes about ten minutes. No apps, nothing to buy.

Why a passcode on its own isn’t enough

Your passcode is the master key to an iPhone. Anyone who has it can change your Apple Account password, switch off Find My, open your saved passwords and erase the phone. That’s why thieves watch for it first: a quick look over your shoulder is easier than any hack.

The settings below are about two things. Stopping someone from making the phone disappear in the first few seconds, and stopping a known passcode from being enough to take over everything else.

1. Make sure Stolen Device Protection is on

This is the single most important setting on the list. With it on, when your iPhone is away from familiar places like home or work, it asks for Face ID or Touch ID for sensitive actions, with no passcode fallback. Changing your Apple Account password, turning off Find My or changing the passcode also needs a one-hour security delay and a second Face ID scan. A thief who only knows your passcode is stuck.

  1. Open Settings.
  2. Tap Face ID & Passcode (or Touch ID & Passcode) and enter your passcode.
  3. Scroll to Stolen Device Protection and make sure it’s on.

Apple turned this on by default from iOS 26.4, but check anyway. It needs Find My and two-factor authentication on your Apple Account, so if the switch is greyed out, sort those first.

2. Lock down what works from the lock screen

In the same Face ID & Passcode screen, scroll down to Allow Access When Locked. Everything switched on here can be used by anyone holding your phone, without unlocking it.

SettingTurn itWhy
Control CentreOffStops a thief swiping down to turn on Airplane Mode or turn off Wi-Fi and mobile data, which would cut the phone off from Find My.
Notification CentreOffStops anyone reading your messages and the security codes banks and apps send you.
Reply with MessageOffStops someone replying to texts as you.
WalletOffKeeps your cards and passes behind Face ID.
Home ControlOffStops your smart locks and alarms being controlled from your lock screen.
AccessoriesOffBlocks USB accessories from connecting while the phone has been locked for over an hour, which protects against data-extraction tools.

You’ll still get notification sounds and see that something has arrived; you just need to unlock the phone to read it. Siri, Today View and Lock Screen Widgets can also go off if you don’t use them from the lock screen.

3. Keep Find My working, even when the phone is off

A thief can still hold the side button and power the phone off. You can’t stop that, but you can make sure it doesn’t make the phone vanish. iPhone 11 and later models can still be found through the Find My network for a while after they’re switched off.

  1. Open Settings and tap your name at the top.
  2. Tap Find My, then Find My iPhone.
  3. Turn on Find My iPhone, Find My network and Send Last Location.

Send Last Location means that if the battery runs flat, your iPhone sends its final position to Apple before it dies.

4. Add a SIM PIN

Your SIM can be pulled out and put into another phone, where it will happily receive your text message codes. A SIM PIN stops that: without the PIN, the SIM won’t connect to the network.

  1. Open Settings and tap Mobile Service (called Mobile Data on older versions of iOS).
  2. Tap SIM PIN (on a dual SIM phone, pick the number first) and turn it on.
  3. Enter your network’s default PIN, then tap Change PIN and set your own.

Don’t guess the default PIN. Too many wrong tries locks the SIM and you’ll need a PUK code from your network. Check your network’s help pages for the default (in the UK it’s usually printed on the SIM card holder or listed on the network’s website).

5. Use a longer passcode

A four-digit code can be read off your screen in one glance. A longer one is far harder to remember after a quick look.

  1. Go to Settings > Face ID & Passcode > Change Passcode.
  2. Enter your current passcode, then tap Passcode Options.
  3. Choose Custom Alphanumeric Code or Custom Numeric Code and set something longer than six digits.

In busy places, use Face ID instead of typing the code. If you do have to type it, shield the screen.

6. Know what to do if it’s stolen

Speed matters. Have a plan before you need it.

If your iPhone is stolen

  1. Mark it as lost. Go to icloud.com/find on any device, or use the Find My app on a family member’s iPhone. This locks the phone and shows your contact number on its screen.
  2. Call your network. Ask them to block the SIM and the phone’s IMEI so it can’t be used on any UK network.
  3. Change your Apple Account password from another device, then check your email and banking apps.
  4. Report it to the police and get a crime reference number. Your insurer and network will ask for it.
  5. Don’t remove it from your account. Leaving it in Find My keeps Activation Lock on, so it’s worthless to whoever has it.

Beware of texts or emails a few days later claiming your phone has been found. They’re a common trick to get your Apple Account password. Apple will never ask for it by text.

Glossary

TermWhat it means
Stolen Device ProtectionAn iPhone feature that requires Face ID or Touch ID, and sometimes an hour’s wait, for sensitive changes away from familiar locations.
Find My networkApple’s crowd-sourced network of nearby Apple devices that can locate your iPhone even when it’s offline.
Activation LockTies an iPhone to your Apple Account so nobody else can set it up after it’s erased.
SIM PINA code that has to be entered before your SIM card connects to the network.
PUKA code from your network that unlocks a SIM after too many wrong PIN attempts.
IMEIYour phone’s unique hardware number. Networks use it to block stolen handsets.

Frequently asked questions

Does Find My work if the thief turns my iPhone off?

On iPhone 11 and later, yes, for a period after it’s switched off, as long as Find My network is turned on. That’s why step 3 matters so much: the thief can still power it off, but it won’t disappear from the map straight away.

Will turning off Control Centre on the lock screen annoy me?

Slightly. You’ll need to unlock the phone before you can open Control Centre, which is a glance with Face ID. Most people stop noticing within a day.

Is Stolen Device Protection on by default?

From iOS 26.4, Apple turns it on for everyone. On older versions you have to switch it on yourself, so it’s worth checking either way.

What if I forget my SIM PIN?

After three wrong tries the SIM locks and asks for a PUK code. Your network can give you the PUK after confirming who you are.

Can a thief still sell my iPhone?

Not easily. With Find My on, Activation Lock stops it being set up by anyone else, even after it’s erased. Most stolen iPhones end up being broken for parts.


Discover more from TechyGeeksHome

Subscribe to get the latest posts sent to your email.

Andrew Armstrong

Andrew Armstrong is a UK-based IT professional with 26+ years of hands-on experience in Windows, Windows Server, SCCM/ConfigMgr, Intune, Active Directory, PowerShell and enterprise infrastructure.

He founded TechyGeeksHome in 2010 and has published 770+ practical guides to real-world IT problems. He also builds free Windows utilities, including Ultimate Settings Panel, which has been downloaded over 850,000 times.

Leave a Reply

Your email address will not be published. Required fields are marked *