iPhone stolen: how to protect your photos and accounts
A thief who saw your passcode is after your account, not just the phone.
In short
Mark the iPhone as lost in Find My, then secure your Apple Account from another device: check its security settings and change the password if anything looks wrong. If the thief may know your passcode, act fast — the passcode can be used to change account settings unless Stolen Device Protection was on. Report the theft to the police and your carrier, and erase the phone remotely if you won’t get it back.
Key takeaways
- Turn on Lost Mode first, from Find My or iCloud.com.
- Secure your Apple Account before the thief can change it.
- Stolen Device Protection only helps if it was on before the theft.
Why a seen passcode changes everything
A stolen iPhone that is locked protects its data. A stolen iPhone whose passcode the thief watched you type is a different problem: without Stolen Device Protection, that passcode is enough to use saved passwords, change the passcode itself or change your Apple Account settings. That is why speed matters more here than in an ordinary loss.
In the first hour
- From another device or Find Devices on iCloud.com, turn on Lost Mode for the stolen iPhone.
- Review your Apple Account security: on another iPhone or iPad, Settings › [your name] › Sign-In & Security, or at account.apple.com. If you see changes you didn’t make, undo them and change your password.
- Report the theft to the police. They may ask for the serial number, which you can find without the phone.
- Contact your carrier to report the phone and ask them to disable your account.
- If you won’t get the phone back, erase it in Find My.
Don’t remove the phone from your account
Keep the stolen iPhone in Find My, even after erasing it. Removing it also removes Activation Lock, the feature that stops anyone from reactivating the phone without your Apple Account password. If you have AppleCare+ with Theft and Loss, keep it in Find My until your claim is approved.
If Stolen Device Protection was on
Away from familiar places such as home or work, Stolen Device Protection requires Face ID or Touch ID — not just the passcode — to use saved passwords, erase the phone or turn off Lost Mode. Changing your Apple Account password or your passcode adds a one-hour security delay. A thief with only your passcode gets much less, much more slowly.
It has to be turned on before a theft. If you’re reading this with a phone still in your pocket, go to Settings › Face ID & Passcode › Stolen Device Protection.
What happens to your photos
If the thief can unlock the phone, they can open Photos — including the Hidden album, which opens with the same passcode. A photo vault with its own secret is a different lock: Latent opens with its own pattern, independent of the iPhone passcode, so knowing the passcode does not open it.
Getting your vault back on a new iPhone depends on its encrypted iCloud backup and its nine-word recovery phrase. Neither is stored on the stolen phone in a usable form.