It addresses a vulnerability that thieves discovered and exploited to lock victims out of their Apple accounts and empty their bank accounts.
LONDON (AP) — You’re in a crowded bar when a thief watches you unlock your iPhone with your passcode, then swipes it. That sinking feeling hits when you realize it’s gone, along with priceless photos, important files, passwords on banking apps and other vital parts of your digital life.
It also reduces the importance of passcodes, which thieves can steal by peering over someone’s shoulder or threatening and forcing victims to hand them over, in favor of “biometric” features such as faces or fingerprints that are a lot harder to duplicate.
Let’s say the bar thief that snatched your iPhone tries to erase its contents and settings to sell it. With Stolen Device Protection turned on, the phone will now require a Face ID or Touch ID scan to verify that person is the rightful owner.
And that’s the only way — the new feature doesn’t let someone use the passcode or any other backup method.
Other actions that will trigger this feature if it’s not at a familiar place include using passwords saved in Keychain or payment methods saved in Safari, turning off Lost Mode, applying for a new Apple Card or using the iPhone to set up a new device.
There’s also a second layer designed to slow down thieves trying to access critical security settings. If someone tries to, say, sign out of an Apple ID account, change the passcode or reset the phone while it’s in an unfamiliar location, they’ll have to authenticate using Face ID or Touch ID, wait an hour, then do a second facial or fingerprint scan.
Changing an Apple ID password, updating Apple ID security settings, adding or removing Face or Touch ID, and turning off the Find My device feature or Stolen Device Protection also will trigger this feature.
“The security delay is designed to prevent a thief from performing critical operations so that you can mark your device as lost and make sure your Apple account is secure,” the company said. “When your iPhone is in a familiar location, these additional steps will not be required and you can use your device passcode like normal.”
How do I activate stolen device protection?
It’s simple — if you know where to look.
First, download and update your iPhone or iPad with the latest iOS update. Then go to your settings, scroll down to “Face ID & Passcode” or “Touch ID & Passcode” and enter your passcode. Scroll down and you’ll see Stolen Device Protection.
Depending on your iPhone model, you’ll need to tap or toggle to turn it on or off. Make sure you’ve first activated two-factor authentication and Find My device for your Apple ID account, or it won’t show up.
What devices does it apply to?
IPhone XS and newer models, including second- and third-generation SE models.