There is a nightmare scenario every iPhone owner fears: a thief snatches your phone — and already knows your passcode (they watched you type it at a bar, a café, a concert). With just the passcode, they can reset your Apple ID password, turn off Find My, and lock you out of your own digital life. iOS 17.3 added a powerful defense against exactly this: Stolen Device Protection.
Once enabled, your iPhone demands Face ID — not just the passcode — for sensitive actions, and adds a one-hour security delay for the most critical changes when you are away from familiar places. Here is how to turn it on and what to know before you do.
What Stolen Device Protection does
With the feature on:
- Viewing saved passwords and payment data requires Face ID (the passcode alone will not work).
- Changing sensitive settings — your Apple ID password, erasing the phone, removing it from your Apple ID — requires Face ID plus a one-hour security delay when you are away from familiar locations (home, work).
The idea: even a thief who knows your passcode cannot take over your accounts without your face. Apple documents the feature in its Stolen Device Protection guide.
How to turn on Stolen Device Protection
- Update to iOS 17.3 or later — the feature does not exist on older versions. (Check Settings > General > Software Update. If you would rather not update, see how to completely block iOS 26 updates on iPhone — but note you will miss this protection.)
- Go to Settings > Face ID & Passcode and enter your device passcode.
- Tap "Stolen Device Protection" and switch it on.
- Confirm with Face ID.
That is it — protection is active immediately. The feature is also offered during initial iPhone setup and in the iOS 17.3 update flow, so you may have already seen the prompt. MacRumors has a step-by-step how-to with screenshots if you want a visual walkthrough.
The Face ID caveat you must know
Here is the honest tradeoff: Stolen Device Protection leans entirely on Face ID. If Face ID stops working — a hardware failure, a botched repair, a software glitch — you cannot disable the feature or access your saved passwords without it. You will be stuck waiting out security delays or visiting Apple Support. It is a real risk, so make sure Face ID is reliable on your device before enabling it, and keep a backup of critical passwords elsewhere (see how to stop Safari from suggesting passwords for websites on iPhone for related password settings).
If it still doesn’t work
If you do not see the "Stolen Device Protection" option, you are almost certainly not on iOS 17.3+ — update first. If the toggle will not stay on, restart your iPhone and try again. And if Face ID itself is flaky, fix that first — the feature is only as reliable as your biometrics.
Frequently asked questions
Does it slow down everyday use?
Barely. At familiar locations (home, work), there is no delay — Face ID just replaces the passcode for sensitive actions. The one-hour delay only kicks in away from familiar places.
Can I turn it off later?
Yes — Settings > Face ID & Passcode > Stolen Device Protection, off, confirmed with Face ID. But remember: if Face ID is broken, you cannot turn it off at all.
Conclusion
Stolen Device Protection is one of the most meaningful iPhone security upgrades in years — a few taps in Settings > Face ID & Passcode, and a stolen passcode alone is no longer enough to hijack your digital life. Just go in with eyes open about the Face ID dependency.
[…] Turn on Stolen Device Protection. It requires Face ID — no passcode fallback — for sensitive actions like changing your Apple ID password away from familiar locations. See our guide to turning on Stolen Device Protection. […]