Stolen Device Protection is an iPhone setting that stops a thief who has watched you type your passcode from taking over your phone and your Apple Account. When your iPhone is away from familiar places such as home or work, it insists on your face or fingerprint (Face ID or Touch ID) for sensitive actions, with no passcode fallback, and makes some critical changes wait an hour. Most people should turn it on. Go to Settings > Face ID & Passcode (or Touch ID & Passcode), enter your passcode, tap Stolen Device Protection and switch it on.
It has to be on before a phone is lost or stolen. Apple is clear that you cannot switch it on afterwards. With busy shops, packed trains and crowded Christmas markets ahead, now is a good time to spend the two minutes.
The Problem It Solves
Your passcode is the master key to your iPhone. Normally, someone holding your unlocked phone who also knows the passcode can change your Apple Account password, switch off Find My, see saved passwords and erase the device. Passcodes are easy to watch over someone’s shoulder in a pub or on a bus.
Stolen Device Protection breaks that link. Away from places your iPhone recognises, knowing the passcode is no longer enough for the most damaging actions. The thief would also need your face or fingerprint, and for some changes, an hour’s wait during which you can mark the phone as lost.
What Changes When It Is On
Actions that need Face ID or Touch ID, with no passcode fallback
Apple lists these. When you are away from a familiar location, the iPhone will not accept your passcode instead:
- Using passwords or passkeys saved in Keychain.
- Using payment cards saved in Safari AutoFill.
- Turning off Lost Mode.
- Opening a locked app.
- Erasing all content and settings.
- Applying for a new Apple Card, or viewing your Apple Card or Apple Cash virtual card number.
- Some Apple Cash and Savings actions in Wallet.
- Using the iPhone to set up a new device, such as with Quick Start.
- Setting up or transferring an eSIM.
Apple Pay still works with your passcode, so you will not be stuck at a till.
Actions that also need an hour’s Security Delay
For the most critical changes, Apple adds a wait: you confirm with Face ID or Touch ID, wait one hour, then confirm again. This covers:
- Changing your Apple Account password.
- Signing out of your Apple Account.
- Updating Apple Account security settings.
- Adding or removing Face ID or Touch ID.
- Changing your iPhone passcode.
- Resetting all settings.
- Turning off Stolen Device Protection itself.
Apple says the delay may end early if the iPhone detects you have arrived at a familiar location.
What Counts as a “Familiar Location”?
Apple describes familiar locations as places like your home, work and other places you regularly use your iPhone. The phone works this out itself using Significant Locations, part of Location Services. You do not need to type in addresses.
If you want the extra checks everywhere, including at home, you can choose that. Go to Settings > Face ID & Passcode > Stolen Device Protection and choose Always under Require Security Delay.
What You Need Before You Can Turn It On
Apple lists these requirements:
- iOS 17.3 or later. Check in Settings > General > Software Update.
- Two-factor authentication on your Apple Account. Our guide to setting up two-factor authentication explains it.
- A passcode on the iPhone.
- Face ID or Touch ID set up.
- Significant Locations turned on in Location Services.
- Find My turned on. Apple notes that Find My cannot be switched off while Stolen Device Protection is on, which is exactly the point. If you have not set it up, see our guide on turning on Find My.
How to Turn On Stolen Device Protection
- Open Settings.
- Tap Face ID & Passcode (on iPhones with a Home button, Touch ID & Passcode).
- Enter your passcode.
- Tap Stolen Device Protection.
- Switch it on.
That is it. Nothing changes in daily use at home. You will only notice it when you try something sensitive while out and about.
How to Turn It Off (and Why It Might Take an Hour)
Follow the same steps and switch it off. If you are away from a familiar location, the Security Delay applies first: confirm with Face ID or Touch ID, wait an hour, then confirm again. This is deliberate. A thief’s first move would be to turn the protection off, and the delay gives you time to put the phone in Lost Mode.
Should You Choose “Always” Instead?
The standard setting relaxes at home and work, which suits most people. Choosing Always under Require Security Delay applies the full protection everywhere. That is worth considering if:
- You share a house with lodgers, students or a lot of visitors, where “home” is not necessarily private.
- You travel a lot and your iPhone may come to treat a hotel or regular office as familiar.
- Someone close to you knows your passcode and you would rather they could not change your account settings.
The trade-off is the hour’s wait for critical changes, even on your own sofa. If you rarely change your passcode or Apple Account password, you may never notice it.
A 30-Second Check for the Rest of the Family
Once yours is on, check the other iPhones in the house. Open Settings > Face ID & Passcode on each and look for Stolen Device Protection. If it is off, the requirements list above usually explains why: most often Find My or two-factor authentication is not yet set up.
Is There Any Downside?
A few things to be aware of:
- If Face ID or Touch ID is not working (gloves, a mask, an injured finger), you may be unable to use saved passwords while away from home, as the passcode will not stand in.
- Changing your Apple Account password on holiday will mean the hour’s wait.
- Setting up a new iPhone with Quick Start while out will need Face ID or Touch ID on the old phone.
For most people these are minor, and the protection is worth it. It does sit best alongside other good habits: a password manager for your accounts, and a plan for who in the family could get into things if something happened to you. Reflecting a Life has a thoughtful guide to leaving a password plan for your family that pairs well with tightening your phone’s security.
Frequently Asked Questions
Does Stolen Device Protection stop someone stealing my iPhone?
No. It cannot stop the theft. It stops a thief who knows your passcode from changing your Apple Account, turning off Find My, erasing the phone or using your saved passwords while you react.
Can I turn it on after my phone has been stolen?
No. Apple says it must be turned on before the device is lost or stolen.
Will Apple Pay stop working with my passcode?
No. Apple says the passcode still works for Apple Pay purchases.
Why do I have to wait an hour to change my passcode?
That is the Security Delay. Away from a familiar location, Apple makes critical changes wait an hour, so a thief cannot lock you out before you mark the phone as lost. The delay may end early once you reach a familiar place.
Which iPhones can use Stolen Device Protection?
Any iPhone running iOS 17.3 or later, with a passcode, Face ID or Touch ID, two-factor authentication and Find My turned on.
Source: Apple Support, About Stolen Device Protection for iPhone.
Last updated: November 13, 2026