protect your devices
How to Lock Your Phone So No One Can Access It If It's Stolen
Your phone just got stolen. Maybe someone grabbed it out of your hand on the street. Maybe you left it on a table and it vanished. Your stomach drops — not because of the device, but because of everything on it. Your email. Your banking apps. Your photos. Your entire digital life is in a stranger's hands.
The next 10 minutes matter more than you think. What you do right now determines whether this is an inconvenience or a catastrophe.
The First 10 Minutes: What to Do Right Now
Time is not on your side. A sophisticated thief can start extracting data from an unlocked phone within minutes. Even a locked phone can be factory reset and resold. Here is your action plan, in order.
Step 1: Lock and Locate Your Phone Remotely
If you have an iPhone:
Go to iCloud.com/find from any browser (a friend's phone, a library computer, anything). Sign in with your Apple ID. Click your missing device. Hit "Mark As Lost." This immediately locks the phone with your passcode, disables Apple Pay, and puts a message on the lock screen with a phone number where you can be reached.
You will also see the phone's last known location on a map. If it is moving, you are watching the thief in real time.
If you have an Android:
Go to google.com/android/find from any browser. Sign in with your Google account. Select the missing device. Click "Secure device." This locks the phone, signs out of your Google account, and displays a message on the screen.
Do this first. Before calling anyone. Before panicking. Lock the phone.
Step 2: Remote Wipe (If Recovery Seems Unlikely)
If your phone is moving away from you, or if you have sensitive data you cannot risk being accessed, wipe it. Both Find My iPhone and Google Find My Device have a "Erase Device" option.
Yes, you will lose anything that is not backed up. But that is better than someone accessing your bank accounts, reading your private messages, or using your identity.
Here is the thing most people do not realize: if you have iCloud or Google backup enabled, a wipe is not permanent for you. Your photos, contacts, and app data come back when you set up a new phone. For the thief, the wipe is permanent.
Step 3: Lock Your SIM
Call your carrier immediately. Tell them your phone was stolen and ask them to suspend or lock your SIM card. This prevents the thief from receiving your text messages — which matters because many services send two-factor authentication codes via SMS.
If the thief can receive your text messages, they can reset passwords on your accounts. Locking your SIM shuts that door.
Carrier numbers to have saved somewhere other than your phone:
- AT&T: 1-800-331-0500
- Verizon: 1-800-922-0204
- T-Mobile: 1-800-937-8997
Step 4: Change Critical Passwords
From another device, change the passwords on your most sensitive accounts in this order:
- Email (this is the master key to everything else)
- Banking and financial apps
- Social media
- Any account that stores payment information
If you use a password manager, you can do this quickly because all your passwords are accessible from any device. If you do not use one, this is the moment where you will wish you had.
Protect your passwords across all devices
1Password stores all your passwords in one secure vault accessible from any device. If your phone is stolen, you can change critical passwords in minutes — not hours. Try it free for 14 days.
Step 5: File a Police Report
You need this for insurance claims and for your carrier to blacklist the device's IMEI number (a unique identifier that can prevent the phone from connecting to any network). Go to your local police station or file online if your city offers it.
Before It Happens: Set Up These Protections Now
If you are reading this before your phone is stolen — good. Spend 15 minutes setting these things up today so that a theft is an inconvenience, not a disaster.
Use a Strong Lock Screen
A six-digit PIN is the minimum. Face ID or fingerprint is better. A four-digit PIN can be brute-forced in minutes with the right tools. A random six-digit PIN buys you significantly more time.
Do not use 123456. Do not use your birthday. Do not use 000000. These are the first codes every thief tries.
Enable Find My Device
On iPhone: Settings > [Your Name] > Find My > Find My iPhone. Turn on Find My iPhone, Find My network, and Send Last Location.
On Android: Settings > Security > Find My Device. Make sure it is on.
Also make sure location services are enabled. Find My does not work if the phone cannot report its location.
Turn Off Lock Screen Previews
By default, your phone shows message previews, email subjects, and notification contents on the lock screen — even when locked. A thief does not need your passcode to read your two-factor authentication codes if they flash on your screen.
On iPhone: Settings > Notifications > Show Previews > When Unlocked.
On Android: Settings > Notifications > On Lock Screen > Hide sensitive content.
Enable SIM PIN
A SIM PIN requires a code before the SIM card will connect to the network. If a thief removes your SIM and puts it in another phone, they cannot use it without the PIN.
On iPhone: Settings > Cellular > SIM PIN.
On Android: Settings > Security > SIM Card Lock.
The default SIM PIN is usually 1234 or 0000. Change it to something unique. But write it down — if you enter the wrong SIM PIN three times, your SIM is permanently locked and you need a PUK code from your carrier.
Use a Password Manager and Authenticator App
Stop using SMS for two-factor authentication. If a thief clones your SIM or intercepts your texts, SMS codes are compromised. Use an authenticator app like Authy or Google Authenticator instead.
And use a password manager so that losing your phone does not mean losing access to your accounts. Your passwords live in the cloud, encrypted, accessible from any device.
Back Up Your Phone Automatically
Enable automatic cloud backups so that wiping your phone does not mean losing your data.
On iPhone: Settings > [Your Name] > iCloud > iCloud Backup > Turn on.
On Android: Settings > Google > Backup > Turn on.
A stolen phone with backups enabled is a $800 loss. A stolen phone without backups is an irreplaceable loss.
What Most People Get Wrong
The biggest mistake people make is assuming their lock screen is enough. It is not. A lock screen protects against casual access, but it does not prevent a thief from removing your SIM card, factory resetting the device, or connecting to a computer with forensic tools.
Layers matter. Lock screen plus Find My plus SIM PIN plus cloud backup plus a password manager — each layer makes a stolen phone less useful to a thief and less damaging to you.
The second biggest mistake is waiting. Every minute between the theft and locking the phone is a minute where the thief can access your data, change your passwords, or intercept your authentication codes. Speed is everything.
Key Takeaways
- Lock your phone remotely within minutes using Find My iPhone or Google Find My Device.
- Call your carrier to suspend your SIM so the thief cannot intercept your text messages and two-factor codes.
- Remote wipe if recovery is unlikely — your cloud backup will restore everything on a new device.
- Change passwords on email, banking, and financial accounts immediately from another device.
- Set up protections now: strong PIN, Find My enabled, SIM PIN, lock screen preview disabled, automatic backups.
- Use a password manager and authenticator app instead of SMS-based two-factor authentication.
Fifteen minutes of setup today can save you days of damage control later. Do it now, while your phone is still in your hand.
Get our free weekly security tips
Simple, jargon-free advice to keep you safe online — delivered every week. Join 3,000+ readers.
Affiliate Disclosure: This article may contain affiliate links. If you make a purchase through these links, we may earn a small commission at no extra cost to you. We only recommend products we genuinely believe in. This helps support our work and allows us to continue providing free content.