How to Turn On Android Theft Protection, Identity Check and Remote Lock

To enable Android theft protection, open Settings > Google > All services > Theft protection. Turn on every supported automatic lock, complete Identity Check, activate Remote Lock with your verified phone number, and confirm that the phone appears in Find Hub.
Complete and verify this setup before the phone is lost or stolen. The controls protect different stages of an incident: Identity Check restricts sensitive changes, automatic locks react to suspicious conditions, Remote Lock provides a quick web-based response, and Find Hub handles locating, marking lost and erasing the device.
Run a pre-theft audit
Do not assume every protection was enabled during initial setup. Google notes that availability can vary by device and market, while its current theft-protection requirements exclude Android Go devices, tablets and wearables from this group of features and require a screen lock.
- Confirm that the phone has a PIN, password or pattern.
- Enroll a supported fingerprint or face-unlock method.
- Open Theft protection and inspect every available control individually.
- Verify the number configured for Remote Lock.
- Confirm that Find Hub is enabled and lists the correct phone.
- Store a Google Account backup sign-in method somewhere other than the phone.
A missing option is not necessarily a configuration error. The official Android compatibility guidance says a device does not support Identity Check if that option is absent and does not support Theft Detection Lock if its control is greyed out. Manufacturer software can also move or rename the menus.
Set the screen lock and biometrics first
A screen credential is the foundation for the theft-protection controls. Choose a PIN or password that cannot be inferred from your birthday, telephone number or information visible on the lock screen, and make sure you can recall it without consulting the phone.
Next, enroll a supported fingerprint or face-unlock method in the device’s security settings. Identity Check requires biometric authentication for protected actions outside trusted places, and the official Android compatibility note limits the feature to devices that support class 3 biometrics.
Verify both methods by locking the phone, unlocking once with biometrics and once with the PIN or password. If another person knows the existing credential, change it before continuing: Identity Check is most useful when an unauthorized person might possess both the phone and knowledge of its screen code.
Turn on Identity Check on Pixel and Samsung phones

On a Pixel or another device that exposes Google’s standard menu, open Settings > Google > All services > Theft protection > Identity Check. Google’s Identity Check instructions require you to sign in to a Google Account, add a screen lock and biometrics, configure trusted places and then tap Done.
On compatible Samsung Galaxy software, use Settings > Security and privacy > Lost device protection > Theft protection > Identity check. Samsung’s Galaxy setup guide documents that path and warns that features and settings vary by phone model and software version.
Some other brands place the page under Settings > Security and privacy > Device unlock > Theft protection, a route documented in Tom’s Guide’s cross-brand walkthrough. If neither route matches, search Settings for “Theft protection” or “Identity Check”; searching cannot expose a feature that the device does not support.
Choose trusted places narrowly. Outside them, Identity Check strictly requires biometrics instead of allowing a PIN, pattern or password when an app invokes the supported identity-verification prompt. Protected actions include changing the screen lock or biometrics, running a factory reset, turning off Find Hub or theft protection, accessing saved Google Password Manager credentials, and adding or removing a Google Account.
A stable home may be a reasonable trusted place if access is controlled. A workplace shared with the public, a transport hub or another broad area where the phone is frequently exposed is a weaker choice because Identity Check relaxes its location-based biometric requirement there.
Enable each automatic lock separately
Return to the main Theft protection page and inspect every control. The similarly named protections react to different conditions:
- Theft Detection Lock uses motion sensors together with Wi-Fi and Bluetooth context to detect movement associated with a phone being taken and carried away. It may not trigger during stable Wi-Fi or Bluetooth connections or after repeated locks in a short period.
- Offline Device Lock locks an unlocked phone after it has been used without an internet connection for a short period. Under Google’s Offline Device Lock rules, the screen can be locked this way twice within a 24-hour period.
- Failed Authentication Lock locks the device after authentication attempts fail repeatedly.
These trigger conditions and limits are documented separately in Google’s feature-by-feature guidance. Some protections may already be enabled by default, so the useful check is their final state rather than whether you remember activating them.
Do not attempt to test Theft Detection Lock by staging a street snatch or running with an unlocked phone. Confirm that the control remains enabled after you leave and reopen Settings; the feature is a risk-reduction layer, not a guarantee that every theft-like movement will be detected.
Activate and rehearse Remote Lock
Open Settings > Google > All services > Theft protection > Remote Lock, enable the control and verify the phone number if prompted. Remote Lock requires a screen lock, an active SIM, a verified number, Find Hub, and an internet connection; an offline phone processes a pending request after reconnecting.
You may also add the optional security question shown in Remote Lock settings. Record the answer securely and allow time for a newly configured question to update on the remote-lock website, because an incorrect answer causes the request to fail.
For a controlled rehearsal, keep the phone beside you and visit android.com/lock from another device. Enter the phone number, complete the CAPTCHA and any configured security question, request the lock, then unlock the phone locally with its normal screen credential. Under Google’s Remote Lock rules, a device can be locked remotely twice within a 24-hour period, so do not repeat the test unnecessarily.
Remote Lock is a fast fallback, not a replacement for Find Hub. It does not require you to sign in to the missing phone’s Google Account from the borrowed device, while Find Hub provides the broader location, lost-mode and erasure tools.
Verify Find Hub without erasing the phone
Open Find Hub in a browser or on another Android device, sign in to the Google Account associated with the phone and select it. Confirm that the correct handset appears, then use Play sound while it is nearby. This tests account access and delivery of a harmless remote action.
According to Google’s Find Hub requirements, remote securing or erasure depends on the phone having power, a mobile-data or Wi-Fi connection, Google Account sign-in, Find Hub enabled and visibility in Google Play. A current position is therefore not guaranteed; Find Hub may instead show an available recent location.
If your Google Account requires an additional sign-in factor, save backup codes or another usable factor outside the phone. Being able to see the Find Hub page while already signed in on a laptop does not prove that you can recover the account from an unfamiliar device.
Do not press Factory reset as a test. Merely confirming that the control exists is sufficient because executing it permanently deletes phone data and ends location availability in Find Hub.
Match each control to its job
The screen credential blocks ordinary local access. Theft Detection Lock and Offline Device Lock try to close an already-unlocked screen under specific conditions, while Failed Authentication Lock reacts to repeated failures. Identity Check adds biometric enforcement around sensitive actions outside trusted places.
Remote Lock lets you close the screen quickly from a web browser using the configured phone-number flow. Find Hub then supports account-authenticated location and recovery actions. Google’s Android protection overview separates the suite into preventive safeguards, automatic reactions and actions taken after a phone disappears.
No layer physically prevents theft, guarantees that a detector will trigger or promises recovery. Enabling the controls together reduces different risks without making them interchangeable.
Use a tracking-preserving order after theft

If the phone is stolen, protect access quickly but avoid making erasure your first reflex when safe recovery and location tracking remain realistic.
- Use Remote Lock from android.com/lock if you cannot enter Find Hub immediately.
- Sign in to Find Hub, inspect the available location and choose Mark as lost to lock the phone and add safe return details.
- Record the handset’s identifying information and ask the mobile carrier to suspend service or protect the number against SIM misuse.
- If the thief may have observed the screen code or accessed an unlocked phone, secure the primary email account, Google Account, password manager, financial services and carrier account.
- Choose remote factory reset only when recovery is no longer credible or the data risk outweighs the value of retaining location access.
Do not travel to an unfamiliar location to confront a suspected thief; give relevant location and device information to local authorities where appropriate. Marking the phone as lost preserves the possibility of locating it, whereas Google’s Find Hub guidance warns that location becomes unavailable after erasure and that removable SD cards may not be deleted.
Finish the preparation now by storing the Google Account needed for Find Hub, a backup sign-in method and the carrier’s support route away from the handset. Repeat the audit after a factory reset, phone-number change, major software upgrade or migration to another phone.
Also read:
Subscribe to our newsletter
Get the latest Web3, AI, and crypto news delivered straight to your inbox.