Activate stolen device protection on iPhone Apfelpatient

Stolen Device Protection is the most important iPhone security feature against an insidious theft scheme: criminals observe the passcode, steal the device and take over the entire Apple Account within minutes. With iOS 17.3, Apple closed this gap, and with iOS 26.4 the protection is automatically enabled on new iPhones. Anyone who wants to know how the feature works, which requirements are needed and which actions it specifically blocks will find the full overview here.

Today, an iPhone protects far more than just photos and messages. Emails, bank logins, saved cards, passwords, and the entire digital identity stack are stored in the Apple account. For a long time, the classic security vulnerability was the six-digit device passcode: anyone who observed it and subsequently stole the iPhone could change the Apple account password, access saved login data, and remove the device from "Find My." The stolen device protection feature puts a stop to this – and adds a crucial layer to the already robust iPhone security features. Blocking mode It is aimed at people with an increased threat profile, while protection for stolen devices is a standard feature for all iPhone users.

What Stolen Device Protection does exactly

Stolen Device Protection adds an extra security layer as soon as the iPhone is not at a familiar location such as home or work. The logic behind it: outside these zones, the likelihood of theft is higher, so stricter rules apply.

Specifically, two mechanisms come into play:

Biometric authentication without passcode fallback: Certain actions can only be authorized with Face ID or Touch ID. Entering the passcode as an alternative is no longer possible. Anyone who knows the passcode but cannot imitate the owner's face fails immediately.
One-hour safety delay: For particularly critical changes, such as the Apple account password, a biometric authentication process is initiated first, followed by a one-hour waiting period, and then a second biometric verification. This one-hour period gives the owner time to mark the device as lost via "Find My" and lock access.

At familiar locations, these additional steps do not apply by default. Anyone who wants maximum security can configure the protection so that the Security Delay is always active – even at home or at the office.

Requirements for turning it on

Before Stolen Device Protection works, several features must be set up on the iPhone:

Two-Factor Authentication for the Apple Account
A passcode
Face ID or Touch ID
“Important places” in location services
“Where is?” is activated (cannot be deactivated when protection is active)

“"Significant Locations" is an option within Location Services that controls which locations the system considers trusted. To review or reset the list, go to Settings → Privacy & Security → Location Services → System Services → Significant Locations & Routes.

Activate Stolen Device Protection

Activation takes just a few steps:

Open Settings
Tap “Face ID & Passcode” (on older iPhones: “Touch ID & Passcode”)
Enter the device passcode
Tap on “Protection for stolen devices”
Turn on the switch

Starting with iOS 26.4, the feature is enabled by default on personal iPhones as soon as the technical requirements are met. With iOS 26.4.1, Apple is extending the default activation to company iPhones as well, which are managed via Mobile Device Management.

These actions require biometric confirmation

Away from familiar locations, iOS strictly requires Face ID or Touch ID for a range of sensitive operations. The passcode alone is then no longer sufficient:

Use passwords or passkeys stored in the Keychain
Autofill payment methods saved in Safari
Disable "Lost" mode
Open a locked app
Erase All Content and Settings
Apply for a new Apple Card (available only in the US)
View the virtual card number of your Apple Card or Apple Cash
Perform certain Apple Cash and Savings actions in Wallet
Set up a new device with your iPhone, for example via Quick Start
Set up or transfer an eSIM

For Apple Pay purchases, the passcode remains valid – everyday use is not affected.

These actions require the one-hour delay

For particularly critical changes, even a single biometric confirmation is not enough. Instead, a one-hour waiting period starts after the first authentication, followed by a second biometric confirmation. Only then does the change take effect:

Change the Apple Account password
Sign out of the Apple Account
Change Apple Account security settings, such as adding or removing trusted devices, a recovery key or recovery contacts
Add or remove Face ID or Touch ID
Change the passcode
Reset all settings
Enroll in Mobile Device Management
Turn off Stolen Device Protection itself

If the iPhone detects that you have returned to a familiar location, the Security Delay may end early.

Always require Security Delay

By default, the additional security measures only apply outside of familiar locations – in the Apple menu, this is the option “Away from familiar places”. Those who want maximum protection at home or at work can change this setting:

Open Settings → Face ID & Passcode
Tap on “Protection for stolen devices”
Under “Safety delay required”, select the “Always” option.

With this setting, the biometric requirements and the one-hour delay apply at all times, regardless of location.

What to consider when selling or transferring your iPhone

Before selling, giving away or trading in an iPhone, Stolen Device Protection must be turned off. Anyone who forgets to do so and is not at a familiar location will run into the Security Delay – disabling it then takes an hour. Anyone setting up the iPhone from scratch or transferring data from an old device keeps the protection automatically. However, it may take some time before the new iPhone correctly recognizes familiar locations.

Apple's consistent move toward more default security

Stolen Device Protection is one of the most effective iPhone security features of recent years. It costs virtually no operating time in everyday use, yet closes exactly the gap that thieves specifically exploit: the observed passcode. With the default activation in iOS 26.4, Apple turns an optional layer of protection into a binding security foundation. Anyone who does not yet have the protection active should switch it on immediately – the 30 seconds in the settings are the most valuable investment in protecting your Apple Account. Time for fresh accessories? Visit our Amazon Storefront and discover a wide selection of products from leading manufacturers, including for HomeKit! (Image: Shutterstock / Thaspol Sangsee)

Frequently Asked Questions about Stolen Device Protection

Which iOS version is required for Stolen Device Protection?

The feature is available from iOS 17.3 onwards. With iOS 26.4, it is enabled by default on personal iPhones, and with iOS 26.4.1 it is also enabled by default on company iPhones managed via MDM.

Does Stolen Device Protection help me locate a lost iPhone?

No. Location tracking is handled by "Where is?". The protection for stolen devices only prevents a thief with a known code from making critical changes.

What happens if Face ID or Touch ID stops working?

Without working biometric authentication, the protected actions cannot be performed away from familiar locations. At a familiar location, you can still disable the protection using your passcode as usual.

Can I still use my passcode for Apple Pay purchases?

Yes. Apple Pay purchases remain available with the passcode. Only access to saved payment methods in Safari is affected by the biometric-only requirement.

Are “Important Places” relevant to data protection?

“Important locations” are stored exclusively on the device using end-to-end encryption. Apple itself has no access to this data.

Can Stolen Device Protection also be enabled on iPad and Mac?

No, the feature is exclusive to iPhone. For iPad and Mac, other security mechanisms such as Lockdown Mode are available.

Make Apfelpatient a preferred source One click – and you'll see us more often on Google

Was this article helpful?

YesNo