Android theft protection explained: what it locks, and what it doesn't cover

Most phone thefts don’t involve clever hacking. A phone is grabbed from a hand on the street, often while it’s unlocked, and the thief’s first move is to keep it unlocked and offline. Android’s newer theft features are designed around exactly that moment. Knowing what each one does helps you see which gaps are left.

Turn it on

The features need a screen lock. Menus vary by phone, so the quickest route is:

1. Open Settings and search for Theft protection.
2. Open it and check each switch below.

On many phones it sits in the account services section of Settings, under Personal and device safety. Some switches may already be on. Some features need Android 10 or later, others Android 15, and they aren’t offered on tablets or entry-level phones.

The four locks

Theft Detection Lock

Uses the phone’s motion sensors, Wi-Fi and Bluetooth to recognise a snatch, such as someone grabbing the phone and running, cycling or driving away, and locks the screen. It’s only active while the screen is unlocked. It may not trigger while the phone has a stable Wi-Fi or Bluetooth connection, or after repeated locks in a short time. If the switch is greyed out, your phone doesn’t support it.

Offline Device Lock

Locks the screen shortly after an unlocked phone loses its internet connection. This counters the thief who switches on airplane mode so you can’t locate the phone. It can lock the screen twice in 24 hours.

Failed Authentication Lock

Locks the phone when unlock attempts keep failing, so a thief can’t keep guessing inside apps that ask for your screen lock.

Remote Lock

Lets you lock the screen from a browser on another device, using your verified phone number. You need a screen lock, an active SIM, a verified phone number, your phone’s find-my-device service turned on, and an internet connection on the phone. If it’s offline, it locks as soon as it reconnects.

Identity check

Some newer phones add an identity check. When you’re away from places you’ve marked as trusted, sensitive actions, such as changing your screen lock, require your fingerprint or face rather than just the PIN. A thief who watched you type your PIN then can’t use it alone to take over the phone’s settings.

Where these features stop

• A thief who knows your PIN. Every lock above returns to your screen lock. If someone watched you enter it, they can unlock the phone and open anything that relies on it. The stolen phone scenario covers what to do next.
• Apps that open with the phone’s lock. A gallery’s locked folder or an app that only asks for your phone PIN opens for the thief too.
• Data already synced. Your cloud account still holds whatever was backed up. Change its password from another device.
• A phone that’s already been searched. Locking after the fact doesn’t undo what someone saw while it was open.

Good habits that fill the gaps

• Use a PIN of six digits or more, and cover the screen when you type it in public. See PIN vs pattern vs passphrase vs biometrics.
• Use fingerprint or face unlock in crowded places, so your PIN is seen less often. See locking Android with fingerprint or face.
• Keep the phone’s find-my-device service on, and know how to erase the phone remotely.
• Put your most private photos and files behind a separate lock that isn’t your screen PIN.

Silo, coming soon to iPhone and Android, opens with its own PIN, separate from your phone’s. It locks whenever the screen turns off, and by default as soon as you leave the app, and locking clears its keys from memory, so a thief who knows your phone PIN still faces a second lock.