Javascript is not enabled.

Javascript must be enabled to use this site. Please enable Javascript in your browser and try again.

Skip to content
Content starts here
CLOSE ×
Search
Leaving AARP.org Website

You are now leaving AARP.org and going to a website that is not operated by AARP. A different privacy policy and terms of service will apply.

Apple’s New Kryptonite for iPhone Thieves Makes Stealing Smartphones Pointless

iOS 17.3 feature can prevent your passcode from being changed


spinner image a person tapping in their passcode for their iphone
GETTY IMAGES

Always be careful in public when you’re tapping out the passcode to unlock your smartphone; thieves may be watching.

And don’t fall for ploys from strangers trying to trick you into sharing that passcode voluntarily. Not everyone heeds the advice.

spinner image Image Alt Attribute

AARP Membership— $12 for your first year when you sign up for Automatic Renewal

Get instant access to members-only products and hundreds of discounts, a free second membership, and a subscription to AARP the Magazine.

Join Now

A yearlong Wall Street Journal investigation found a spate of smartphone crimes across the country. iPhones are the chief target because Apple’s handsets generally have a higher resale value than their Android counterparts.

Passcodes open the doors to your smartphone

Armed with snatched passcodes and the phone itself, bad guys can replace facial recognition or fingerprint protections with their own mugs or digits, giving them the key to your bank accounts, passwords, photos and other personal information. You could lose much more than the smartphone itself.

On Jan. 23, Apple released a new, free tool as part of its iOS 17.3 update, the aptly named Stolen Device Protection, and found in your iPhone’s Settings ⚙️. While not bulletproof, it adds a layer of security when your phone is outside your familiar surroundings, preventing crooks who have stolen the device from making critical changes to it or your Apple account.

Stolen Device Protection is not on automatically. You’ll have to enable the feature manually.

How do I begin?

1. Start by installing the iOS 17.3 update. Tap Settings ⚙️ | Software Update to begin.

2. Use two-factor authentication for your Apple ID and make sure to have a passcode, Face ID or Touch ID. The Find My tool that can help you locate lost items, and sometimes people, must also be enabled.

3. In Settings ⚙️, scroll to either Face ID & Passcode or Touch ID & Passcode, depending on the iPhone model you own.

4. Enter your device’s passcode.

5. Scroll down to Stolen Device Protection. Tap it so On is showing.

Does the phone really need to know places I frequent?

For the purposes of the Stolen Device Protection feature, it does. Make sure the optional Significant Locations feature on the device is enabled. Go to Settings ⚙️ | Privacy & Security | Location Services | System Services | Significant Locations.

Significant Locations helps the iPhone and other iCloud-connected devices learn about places important to you, such as where you live, work or frequent, Apple says. The idea is to supply useful location-related information when you use Calendar, Maps, Photos or other apps.

These places are end-to-end encrypted, scrambled so not even Apple can read them, the company says.

How does Stolen Device Protection safeguard my phone?

If you’re outside a familiar location, you must use Face ID or Touch ID before you can take the following actions:

  • Use passwords or passkeys saved in the Keychain repository of passwords.
  • Take advantage of autofill payment methods saved in the Safari browser.
  • Turn off Lost Mode, which allows you to lock any of your Apple devices so others can’t access your personal information.
  • Erase all content and settings.
  • Apply for a new Apple Card credit card or view an Apple Card’s virtual card number.
  • Perform certain Apple Cash and savings actions, such as transferring money in the Wallet app.
  • Use iPhone’s Quick Start feature to set up a new device.
Technology & Wireless

Consumer Cellular

5% off monthly fees and 30% off accessories

See more Technology & Wireless offers >

But I can do other things if I’m away?

Sorry, you must wait. Other more sensitive features impose a one-hour delay if the phone is away from its Significant Locations.

After a theft, that could give you time to take steps to recover the phone or minimize damage. You’ll have to wait to:

  • Change your Apple ID password.
  • Sign out of your Apple ID.
  • Update Apple ID account security settings.
  • Add or remove Face ID or Touch ID.
  • Change your iPhone passcode.
  • Reset all settings.
  • Turn off the Find My feature.
  • Turn off the Stolen Device Protection feature that puts these limits in place.

Even after this delay, you must prove that you’re you again with Face ID or Touch ID to update any of the items on this list.

You indicated the feature isn’t bulletproof. How so?

The iPhone may need several days or longer before it learns the places you consider significant, especially since you can’t manually mark such places. This could be a hassle if you need to perform any time-delayed actions when Stolen Device Protection is enabled.

Meanwhile, a thief with your passcode can purchase items using Apple Pay with just the passcode. And the criminal also can access other accounts on the phone, including Notes, where some people keep passwords against the advice of security experts.

Do Androids have an equivalent feature?

Android phone features can vary by manufacturer, so direct security comparisons are difficult. But strong security practices apply whether you’re using an iPhone or Android.

Always employ complex passwords with a string of characters that you can remember but that will be hard for anyone else to guess. Avoid using the same passwords across accounts and devices.

You should also use two-factor authentication and any biometric security options on the devices you own.

Discover AARP Members Only Access

Join AARP to Continue

Already a Member?