One of the sneakiest iPhone theft methods is “shoulder surfing” — a thief watches you enter your passcode, snatches your phone, and within minutes changes your Apple ID password, locks you out, and disappears with your digital life. To combat this exact threat, Apple introduced Stolen Device Protection in iOS 17.3 — a new security layer that makes a stolen iPhone nearly useless in a thief's hands.
📖 Read more: Passkeys iPhone 2026: A World Without Passwords
What Is Stolen Device Protection?
Stolen Device Protection is a security feature that locks your iPhone's most sensitive settings behind biometric authentication (Face ID or Touch ID) when you're away from familiar locations like your home or workplace.
Even if a thief knows your passcode, they cannot:
• Change your Apple ID password
• Turn off Find My
• View your saved passwords
• Use stored payment methods
• Erase the device completely
All of these require Face ID or Touch ID — the passcode alone won't cut it.
How It Works: The Tech Behind the Protection
Stolen Device Protection relies on two key mechanisms:
1. Biometric Requirement
When you're at an unfamiliar location, many actions that normally just need a passcode now exclusively require Face ID or Touch ID. There's no fallback to passcode entry.
2. One-Hour Security Delay
For the most critical changes — like changing your Apple ID password, disabling Find My, or changing your device passcode — the system requires:
Biometric check → 1-hour wait → Second biometric check
This means even under duress, there's a built-in window for you to react, contact authorities, or lock the device remotely.
📖 Read more: AirTag 2: New Features & Precision Finding
What Exactly Does It Lock?
Actions requiring biometrics only: Access to saved passwords, using stored payment methods, applying for a new Apple Card, removing a device from your account.
Actions requiring biometrics + 1-hour delay: Changing Apple ID password, changing device passcode, modifying Face ID/Touch ID settings, disabling Find My, disabling Stolen Device Protection itself.
How to Enable It — Step by Step
Setup takes less than a minute:
1. Open Settings
2. Tap Face ID & Passcode
3. Enter your passcode
4. Scroll to Stolen Device Protection
5. Tap Turn On Protection
📖 Read more: Advanced Data Protection iPhone: What It Protects
Requirement: You need iOS 17.3 or later. If you don't see the option, update your iPhone's software first.
Which iPhones Support It?
Stolen Device Protection works on all iPhones running iOS 17.3 or later — that includes iPhone XS, iPhone XR, and newer (including iPhone SE 2nd generation and later). If your iPhone can run iOS 17, it supports Stolen Device Protection.
Real-World Scenarios
"You're at a bar in the city center. You unlock your iPhone — someone behind you catches your passcode. Later, they grab your phone and run. Without Stolen Device Protection, they could change your Apple ID password, erase the device, and sell it within minutes. With Stolen Device Protection, every critical change requires your face — which they don't have."
Another scenario: A pickpocket watches you type your passcode on the subway, then snatches the iPhone near the doors. With Stolen Device Protection, even after entering the device, they can't make any critical changes without Face ID plus a one-hour security delay.
VPN Users: Important Note
If you use a VPN, your iPhone might think you're at a different location, triggering security delays even when you're at home. If this happens, temporarily disable the VPN before making important settings changes.
📖 Read more: VPN for iPhone 2026: Top 5 for Security
What to Do If Your iPhone Is Stolen
Act immediately:
1. Go to iCloud.com/find from any device
2. Mark the device as Lost (Lost Mode)
3. Contact the police
4. Change your Apple ID password immediately
5. Notify your mobile carrier
With Stolen Device Protection active, the thief won't be able to disable Find My before you take action.
Final Thoughts
Stolen Device Protection is one of the most important security features Apple has introduced in recent years. If you haven't enabled it yet, do it now — it takes 30 seconds and could save you from massive headaches. We see customers at OnOff.gr every day who've lost access to their accounts after a theft. Stolen Device Protection is the best prevention available.
