How to Set Up Theft Protection on Android

Android has shipped a full anti-theft suite since late 2024, and Google pushed a significant round of upgrades in January 2026: a dedicated toggle for Failed Authentication Lock on Android 15 and newer, longer lockouts for PIN guessing, and an optional security question that guards Remote Lock. Almost none of it is enabled out of the box. This guide walks through every switch, where it hides in Settings, and the cases where each feature quietly refuses to fire.

Theft Protection is not one feature but five, and they have different version requirements:

• Theft Detection Lock: on-device AI that senses a snatch-and-run and locks the screen. Android 10 and newer.
• Offline Device Lock: locks the screen when a thief cuts the internet connection to dodge tracking. Android 10 and newer.
• Failed Authentication Lock: locks the device after repeated wrong unlock attempts. The dedicated on/off toggle arrived with the January 2026 update on Android 15 and newer.
• Remote Lock: lock the phone from any browser at android.com/lock with just your phone number. Android 10 and newer, hardened in January 2026 with an optional security question.
• Identity Check: forces biometrics for sensitive actions when you are away from trusted places. Android 15 and newer, on supported hardware.

The suite does not run on Android Go phones, tablets or Wear OS watches. If a toggle is grayed out or missing, that model does not support it; there is no hidden flag to force it. Everything below assumes a PIN, pattern or password is set, because every feature requires a screen lock.

Google buried this menu deeper than it deserves. The canonical path:

1. Open Settings.
2. Tap Google.
3. Tap All services.
4. Under Personal & device safety, tap Theft protection.

Many current phones, including Pixels on Android 16, also expose a shortcut under Settings > Security & privacy > Device unlock > Theft protection. If neither exists, update Google Play services first; the suite ships through Play services rather than firmware, which is why a 2020 phone on Android 10 still gets it. Searching "theft" in the Settings search bar is the fastest route of all.

On the Theft protection screen, tap Theft Detection Lock and flip the toggle. There is nothing else to configure. The model runs entirely on-device, combining accelerometer data with Wi-Fi and Bluetooth context to recognize a phone being yanked from your hand while unlocked, followed by someone running, cycling or driving away. On a match, the screen locks within a second or two.

The caveats matter as much as the feature:

• It only protects an unlocked phone. If the screen was already locked, it stays idle because there is nothing extra to protect.
• A stable connection to a known Wi-Fi network or a paired Bluetooth device suppresses it, since that context suggests you are at home or in your car, not being robbed.
• After a few triggers in a short window it backs off temporarily, so a bumpy bike ride does not lock you out five times.
• False positives happen. Sprinting for a bus with the phone in hand or hard braking with it loose on a car seat can trigger it; the cost is just re-entering your PIN.

There is no notification when it fires; the phone is simply locked when you next look at it.

The first thing an experienced thief does is toggle airplane mode or pull the SIM so the phone stops reporting its location. Offline Device Lock counters that: if the phone is unlocked and loses all connectivity, the screen locks automatically.

Same menu, tap Offline Device Lock, turn it on. Two caveats. First, it locks the screen at most twice in any 24-hour period, a limit that keeps subway commuters and flight passengers from being punished endlessly. Second, it does nothing about the offline state itself; the phone still cannot be tracked until it reconnects, which is why it pairs with Remote Lock rather than replacing it.

Failed Authentication Lock watches for someone hammering wrong PINs, patterns or passwords and locks the device down when attempts pile up. Until this year it was managed for you; the January 2026 update gave phones on Android 15 and newer a dedicated toggle on the Theft protection screen, so check that it is actually on rather than assuming.

Two related hardening changes shipped alongside it on Android 16. Lockout timers after failed attempts now escalate more aggressively, stretching the time between guesses. And entering the same wrong PIN repeatedly no longer burns additional attempts, so a phone bouncing in a pocket, or you confidently retrying a misremembered PIN, no longer counts as an attack.

Remote Lock is the feature you will actually use in a crisis, because it works from any browser with nothing but your phone number. No Google password needed, which is the point: after a theft you are usually standing on a street holding someone else's phone.

Setup:

1. Go to Theft protection > Remote Lock and turn it on.
2. Confirm your phone number is verified. Remote Lock requires an active SIM with a number Google can check.
3. Add the security question introduced in January 2026: a challenge that must be answered before a remote lock goes through. Do this. Without it, anyone who knows your number could lock your phone as a prank; with it, only you can.

To use it later, open android.com/lock on any device, enter the phone number, complete the verification challenge, answer your security question, and confirm. If the thief already forced the phone offline, the lock lands the instant it reconnects. It works a maximum of twice per 24 hours and requires Find Hub, which is on by default on any device signed in to a Google account.

A locked screen is worthless if the thief watched you type your PIN before grabbing the phone, the most common pattern in bar and transit thefts. Identity Check closes that hole: away from your trusted places, sensitive actions demand your fingerprint or face, and the PIN is not accepted as a fallback.

Setup: Theft protection > Identity Check, then sign in, confirm biometrics are enrolled, and designate trusted places such as home and work. It launched on Android 15 for Pixel and Samsung, and Google has since expanded it to cover every app that uses Android's biometric prompt, including banking apps and Google Password Manager. That means a thief with your PIN still cannot read saved passwords, change the screen lock, or turn off Find Hub outside your trusted zones.

If the option does not appear on your Theft protection page, your manufacturer has not enabled it yet. In that case a third-party locker from our roundup of app lock apps for Android can gate individual banking and email apps behind a separate credential, which covers part of the same ground.

Speed matters most in the first ten minutes. Borrow any phone or laptop and work down this list:

1. Lock it: go to android.com/lock, enter your number, answer your security question. This is faster than logging in to your Google account.
2. Track it: sign in at the Find Hub site or app and watch the location. Our guide to finding a lost Android phone covers the tracking side in detail, including the crowdsourced network that locates phones even when offline.
3. Mark it as lost in Find Hub. This locks the phone with your existing credential, signs it out of sensitive surfaces, can remove cards from Google Wallet, and puts a contact message on the lock screen.
4. Call your carrier to suspend the SIM, so the thief cannot receive your SMS two-factor codes. Do this after the lock, not before, because suspending the SIM can also cut the phone's data connection.
5. Erase as a last resort. Find Hub's erase wipes the device but ends tracking permanently, and Factory Reset Protection still demands your Google credentials at setup afterward.
6. Report the IMEI to the police. Find it beforehand in Settings > About phone and note it somewhere off the device today.

Be clear about the limits. None of these features prevent the physical theft, and none of them protect data on a phone stolen while powered off, since Theft Detection Lock needs an unlocked screen and Remote Lock needs the device to come online. A stolen SD card is readable in any computer regardless of your screen lock, so avoid storing sensitive files on one. And the suite is anti-theft, not anti-malware; sideloaded spyware that captures your credentials sits entirely outside its scope, which is where the antivirus apps we have tested earn their keep.

Finally, test your setup this week. Ask a friend to visit android.com/lock with your number and stop at the security question. Open Find Hub from another device and confirm your phone appears with a recent location. Five minutes of rehearsal is the difference between a calm response and a panicked one.