How to Turn On Android Theft Protection Before Your Phone Is Stolen

Before your Android phone is lost or stolen, set a strong screen lock, then open Settings > Google > All services > Theft protection. Turn on Theft Detection Lock, Offline Device Lock, Remote Lock and Failed Authentication Lock where available; configure Identity Check if supported; and confirm that your phone appears in Google Find Hub.

These controls are available on supported Android phones, but the exact set varies by model and software version. They cannot prevent someone from taking the device, but they can automatically lock an exposed screen, require stronger identity verification for sensitive changes and give you remote recovery options that have been prepared in advance.

Prepare your screen lock and account recovery

A secure screen credential is the foundation for the rest of the setup. Google’s screen-lock guidance recommends a PIN with at least six digits for stronger protection, although a password is the more secure standard option.

Open Settings > Security and privacy > Device unlock, Settings > Security > Screen lock, or the equivalent menu supplied by your manufacturer.
Set a PIN or password that cannot be readily guessed or inferred from personal information.
Add a fingerprint or a face-unlock method that your phone supports for biometric verification.
Check that your Google Account has a current recovery email address and phone number.
Make sure you know the Google Account password without relying exclusively on a password manager stored on the phone.

Your missing phone may also contain your authenticator app, passkey and active SIM, so prepare a sign-in method that remains available elsewhere. Google’s backup-code instructions explain how to create single-use codes for accounts protected by two-step verification; store them with other important documents, not in a screenshot on the handset.

You should also record the device’s IMEI and your carrier’s contact details somewhere secure. Google explains in its lost-device guidance that the IMEI can be viewed from Find Hub and may be used by a mobile provider when disabling a device.

Find the complete Theft protection menu

Google’s theft-protection instructions give the standard path as Settings > Google > All services > Theft protection. The same route appears in an Android Authority setup walkthrough, which shows Theft Detection Lock alongside Offline Device Lock, Remote Lock and device-finding options.

Review every option instead of enabling only the first switch. Depending on the device, the page can include Theft Detection Lock, Offline Device Lock, Remote Lock, Failed Authentication Lock and Identity Check; some controls may already be active.

Google’s current compatibility notes say that some steps require Android 10 or later, while other protections require Android 15 or later. The principal phone features are not supported on Android Go devices, tablets or wearables, and availability can also vary by model.

If an expected control is absent or greyed out, install available Android, Google Play system and Google Play services updates, restart the phone and check again. A switch that remains unavailable may require manufacturer support rather than a separate security app.

Enable automatic locking

Android automatic theft, offline and failed-authentication locks protecting an unlocked phone.

Theft Detection Lock is intended to protect an unlocked phone that is suddenly taken. Google’s Theft Detection Lock documentation says the feature uses AI, motion sensors, Wi-Fi and Bluetooth to recognize movement consistent with someone grabbing the phone and running, cycling or driving away, then locks the screen when that pattern is detected.

Open Settings > Google > All services > Theft protection.
Turn on Theft Detection Lock and approve the confirmation prompt.
Turn on Offline Device Lock.
Turn on Failed Authentication Lock if the switch is present and not already active.

Theft Detection Lock is not guaranteed to recognize every theft. The official operating notes say it is inactive when the screen is locked and may refrain from triggering when the phone has a stable Wi-Fi or Bluetooth connection or has locked repeatedly within a short period.

Offline Device Lock covers a different situation: an unlocked phone losing its internet connection. Google’s Offline Device Lock guidance says the screen locks after the device has been used offline for a short period, provided that the phone was unlocked when connectivity disappeared; the documented limit is two offline locks within 24 hours.

Failed Authentication Lock automatically locks a supported device after repeated unsuccessful authentication attempts. Keep it enabled, but do not treat it as protection against an observed PIN: a person who already knows the correct credential does not need to guess repeatedly.

Configure Remote Lock in advance

Remote Lock lets you submit a screen-lock request from another browser using the verified phone number associated with the handset. Go to Settings > Google > All services > Theft protection > Remote Lock, turn it on, verify the displayed number and add an optional security question if the setting is offered.

Google lists a screen lock, active SIM, verified number, enabled Find Hub and an internet connection among the Remote Lock requirements. You send the request at android.com/lock; if the handset is offline, the pending request takes effect when it reconnects.

Google’s Remote Lock limits allow two remote screen-lock requests within a 24-hour period. After Remote Lock succeeds, the handset can be reopened only locally with its existing screen credential.

Remote Lock is useful when you can recall the phone number but cannot immediately complete a Google Account sign-in. It does not replace Find Hub because it does not provide the full location, lost-device and erasure workflow.

If you use the optional security question, choose an answer that is not visible on social media or easy to infer from public records. Keep the answer with your offline recovery information rather than in a note on the protected phone.

Turn on Identity Check where supported

Identity Check is designed for a situation in which someone possesses both the phone and its screen credential. Outside your designated trusted places, it enforces biometric verification for supported sensitive actions instead of accepting the PIN, pattern or password as a fallback.

Google identifies changes to the screen lock and biometrics, factory resets, disabling Find Hub or theft controls, access to Google Password Manager credentials, and changes to important Google Account recovery factors among the actions protected by Identity Check.

Open Settings > Google > All services > Theft protection > Identity Check.
Sign in to the Google Account requested by the setup flow.
Confirm your screen lock and enroll supported biometric authentication.
Add trusted places, checking that each location is correctly positioned.
Complete the flow and confirm that Identity Check is active.

If Identity Check does not appear on the Theft protection page, Google’s compatibility guidance says the device does not support it. Check the manufacturer’s update and compatibility information rather than assuming an unrelated app can add the required system enforcement.

Keep the trusted-place list narrow. Removing former homes and workplaces promptly reduces the chance that the phone will treat an inappropriate location as exempt from stronger biometric checks.

Verify Find Hub from a second device

Find Hub is Google’s account-authenticated service for locating and remotely managing a missing Android device. Google’s Find Hub preparation guide says the service can ring, locate, secure or erase an eligible phone and that its crowdsourced network uses end-to-end encrypted location information from participating Android devices.

Open Settings > Google > All services > Personal & device safety > Find Hub, or search Settings for “Find Hub.”
Confirm that Allow device to be located is on.
Review the available offline-finding or network setting.
Check that the correct Google Account is attached and Location is enabled.
Visit android.com/find from a trusted computer or second device and confirm that the correct phone appears.

Google’s preparation checklist confirms the Find Hub settings path and the need to make the device locatable before it disappears. A successful check should show the intended handset under the account you expect to use during recovery.

Use remote erasure only when recovery is no longer realistic. Google warns in its Find Hub erasure instructions that the action permanently deletes device data, may not delete an SD card and makes the phone’s location unavailable in Find Hub afterward.

Back up irreplaceable files and authentication data before an emergency. A remote reset can remove local data from a missing device, but it cannot restore files that were never backed up elsewhere.

Use the Pixel or Samsung route that matches your phone

Pixel and Samsung menu paths leading to Android theft protection and Identity Check controls.

On Pixel phones, begin with the manufacturer-independent Google route: Settings > Google > All services > Theft protection. Some Android interfaces also expose the controls at Settings > Security and privacy > Device unlock > Theft protection; a multi-brand menu walkthrough documents that alternate path and directs Samsung owners to look under Lost device protection.

On compatible Galaxy phones, use Settings > Security and privacy > Lost device protection > Theft protection. Samsung’s Galaxy instructions show that route and then direct users to Identity Check, Samsung Account sign-in, fingerprint enrollment and safe-place setup.

Samsung’s compatibility notes caution that feature availability and menus vary by model and software version and identify Wi-Fi, Bluetooth and Location as required services for the documented Galaxy setup.

Review Samsung’s own lost-device options if your phone presents them, but verify Google Remote Lock and Find Hub separately. The services may use different accounts and should not be assumed to configure one another.

For another manufacturer, try the Google route first and then search Settings for the exact names “Theft protection,” “Identity Check” and “Find Hub.” Search is also the safest approach after a software update moves an otherwise supported control.

Run a recovery drill without sending a lock command

A safe drill verifies your access without deliberately triggering Theft Detection Lock, Remote Lock or erasure. Keep the phone connected and use a separate trusted computer or tablet to sign in to Find Hub with the recovery method you would have if the handset were unavailable.

Confirm that your backup code, security key or secondary authenticator can be reached without the phone.
Check that Find Hub lists the correct handset and displays a recent status or location.
Open android.com/lock only far enough to confirm that you know the verified phone number and optional security answer.
Do not submit the Remote Lock form and do not select factory reset.
Close the sessions and store the recovery checklist, IMEI and carrier details separately from the handset.

Do not simulate a snatch by having another person grab the device. Theft Detection Lock is probabilistic, while a remote reset is destructive once the command reaches an online phone.

Finish by checking that every available automatic lock is active, Remote Lock has the correct verified number, Identity Check is configured if supported, Find Hub shows the intended handset, backups are current and account recovery does not depend on the phone itself. Repeat this drill after changing the handset, phone number, primary Google Account, screen credential or enrolled biometrics.